FRISK Software International


Summary of VBS/VBSWG_AQ
Alias:Shakira
Discovered: 5 Jun 2002
Infection Method:via mIRC and infected e-mail messages with Outlook
 
Jump to:
Brief description
Technical description

Brief Description
VBSWG.AQ also known as Shakira is a Visual Basic Script worm generated with VBSWG virus kit.


Technical Description
VBSWG.AQ is written to spread via mIRC and via email using Outlook Application.

The worm sends email messages with the following contents:


    Subject: Shakira's Pictures


    Body:   Hi :
	i have sent the photos via attachment
	have funn...


    Attachment: ShakiraPics.jpg.vbs
VBSWG.AQ searches for files with extensions .vbs and .vbe and infects them. The worm also shows a message box displaying the text:

You have been infected by ths ShakiraPics Worm


[Analysis: Katrin Tocheva, F-Secure; June 5th, 2002]
 


Stay up to date with important developments via e-mail.
Stay up to date with life cycle policies for F-PROT Antivirus for Windows.
Virus news and information directly to your desktop.
Definitions of common antivirus terminology.
For further virus information, please try our partners' websites:

Authentium

perComp Verlag
(in German)
 

agoat@klaki.net argentina@f-prot.com argentina@frisk.is argentina@complex.is argentina@f-prot.is argentina@frisk-software.com argentina@f-prot.net argentina@f-prot.co.uk brazil@f-prot.com brazil@frisk.is brazil@complex.is brazil@f-prot.is brazil@frisk-software.com brazil@f-prot.net brazil@f-prot.co.uk malta@f-prot.com malta@frisk.is malta@complex.is malta@f-prot.is malta@frisk-software.com malta@f-prot.net malta@f-prot.co.uk a.bjani@f-prot.com a.bjani@frisk.is a.bjani@complex.is a.bjani@f-prot.is a.bjani@f-prot.co.uk a.bjani@frisk-software.com a.bjani@f-prot.net z.fifl@f-prot.com z.fifl@frisk.is z.fifl@complex.is z.fifl@f-prot.is z.fifl@f-prot.co.uk z.fifl@frisk-software.com z.fifl@f-prot.net strumpuri@complex.is strumpure@complex.is strumpuru@complex.is