Threat Description

VBSWG.AQ

Details

Aliases:VBSWG.AQ, Shakira
Category:Malware
Type:Virus
Platform:W32

Summary



On June 7th, 2002 VBSWG.AQ virus increased its spreading.

VBSWG.AQ also known as Shakira is a Visual Basic Script worm generated with VBSWG virus kit.

VBSWG.AQ is written to spread via mIRC and via email using Outlook Application.



Removal


Automatic action

Once detected, the F-Secure security product will automatically disinfect the suspect file by either deleting it or renaming it.

More

You may wish to refer to the Support Community for further assistance. You may also refer to General Removal Instructions for a general guide on alternative disinfection actions.



Technical Details



The worm sends email messages with the following contents:

  Subject: Shakira's Pictures
Body:Hi :
	i have sent the photos via attachment
	have funn...
Attachment: ShakiraPics.jpg.vbs

VBSWG.AQ searches for files with extensions .vbs and .vbe and infects them. The worm also shows the following message box:

F-Secure Anti-Virus has a generic detection that detects this worm and all VBSWG kit created viruses. This generic detection is included in F-Secure Anti-Virus since the beginning of February, 2001.





Description Created: Analysis: Katrin Tocheva, F-Secure; June 5th, 2002


SUBMIT A SAMPLE

Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

Learn More