Summary

On June 7th, 2002 VBSWG.AQ virus increased its spreading.

VBSWG.AQ also known as Shakira is a Visual Basic Script worm generated with VBSWG virus kit.

VBSWG.AQ is written to spread via mIRC and via email using Outlook Application.

Additional Details

The worm sends email messages with the following contents:

    Subject: Shakira's Pictures

    Body:   Hi :
	i have sent the photos via attachment
	have funn...

    Attachment: ShakiraPics.jpg.vbs

VBSWG.AQ searches for files with extensions .vbs and .vbe and infects them. The worm also shows the following message box:



F-Secure Anti-Virus has a generic detection that detects this worm and all VBSWG kit created viruses. This generic detection is included in F-Secure Anti-Virus since the beginning of February, 2001.

[Analysis: Katrin Tocheva, F-Secure; June 5th, 2002] <END>