1. Symantec/
  2. Security Response/
  3. VBS.Waterworks.Worm


Risk Level 1: Very Low

February 5, 2003
February 13, 2007 11:59:51 AM
Also Known As:
VBS/Waterworks.worm [McAfee], VBS_EVION.A [Trend], VBS.Evion [KAV]
Systems Affected:
Windows 2000, Windows 3.x, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP

VBS.Waterworks.Worm is a Visual Basic Script worm that spreads on all the local and mapped drives. It overwrites .vbs and .html files. VBS.Waterworks.Worm can also spread using mIRC. This worm will display one of 3 messageboxes if the system date is October 15, November 23 or December 25.

The worm was most likely created in Germany.

Antivirus Protection Dates

  • Initial Rapid Release version February 6, 2003
  • Latest Rapid Release version September 28, 2010 revision 054
  • Initial Daily Certified version February 6, 2003
  • Latest Daily Certified version September 28, 2010 revision 036
  • Initial Weekly Certified release date February 12, 2003
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Jari Kytojoki

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
2016 Internet Security Threat Report, Volume 21
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube