On June 7th, 2002 VBSWG.AQ virus increased its spreading.
VBSWG.AQ also known as Shakira is a Visual Basic Script worm generated with VBSWG virus kit.
VBSWG.AQ is written to spread via mIRC and via email using Outlook Application.
Once detected, the F-Secure security product will automatically disinfect the suspect file by either deleting it or renaming it.
The worm sends email messages with the following contents:
Subject: Shakira's Pictures Body:Hi : i have sent the photos via attachment have funn... Attachment: ShakiraPics.jpg.vbs
VBSWG.AQ searches for files with extensions .vbs and .vbe and infects them. The worm also shows the following message box:
F-Secure Anti-Virus has a generic detection that detects this worm and all VBSWG kit created viruses. This generic detection is included in F-Secure Anti-Virus since the beginning of February, 2001.
Description Created: Analysis: Katrin Tocheva, F-Secure; June 5th, 2002