F-Secure Alerts Computer Users of a New E-Mail Worm VBSWG.X

Helsinki, Finland - May 9, 2001

F-Secure Corporation (HEX:FSC), a leading provider of centrally-managed, widely distributed security solutions is alerting computer users worldwide about a new, rapidly spreading e-mail worm named VBSWG.X, also known as Homepage, is an encrypted e-mail worm found in the wild on May 9th, 2001.

This is an encrypted worm generated with VBSWG virus kit. It is similar to the widely spread worm at February 2001 - VBS/Onthefly (also known as Anna Kournikova worm VBSWG.X worm spreads using Outlook Application. This new virus sends messages with a subject "Homepage" and a body "You've got to see this page! It's really cool ;O)".

When the attached file is executed, the worm will send (mass mail) itself to each recipient in every address book. After this, the worm attempts to open one of four x-rated web pages. However, the mass-mailing part of the code generates much more serious consequences, including overloading e-mail servers and public relation problems.

"Early propogation reports indicate that this virus is spreading faster than many of the biggest viruses we saw last year", comments Mikko Hypponen. "It's seems to be spreading faster as Anna Kournikova".

As soon as F-Secure got got a sample of the virus, it added detection of this virus version. This took around two hours, and took place Wednesday 9th 3 AM Utc.

Please find more information:

http://www.europe.f-secure.com/v-descs/vbswg_x.shtml http://www.f-secure.com/v-descs/vbswg_x.shtml