Category: Malware

Type: Worm

Aliases: Jean, Santa, I-Worm.Santa, Xmas


Jean is a mass mailer (worm) written in Visual Basic Script.


Automatic action

Based on the settings of your F-Secure security product, it will either automatically delete, quarantine or rename the detected program or file, or ask you for a desired action.

Knowledge Base

Find the latest advice in our Community Knowledge Base.

About the product

See the manual for your F-Secure product on the Help Center.

Contact Support

Chat with or call an expert for help.

Submit a sample

Submit a file or URL for further analysis.

Technical Details


Jean.A spreads to first 50 recipients written in MS Outlook address book. The message that this worm sends looks as follows:

Subject: "News vom Weihnachtsmann " [user's name]
Guten Tag,
es ist bald Weihnachten.
Und wie sieht's aus mit schonen Geschenken ?
Hierzu ein Tip vom Weihnachtsmann:
Unter gibt es die besten Geschenke im Web !
Das bedeutet absolut stressfreies Einkaufen, schnelle und unkomplizierte Lieferung, riesige Auswahl.
Also nichts wie hin, und Frohe Weihnachten.
Attachment: [the infected script file] 

Jean.A was found in the wild in Germany on 24 of November 2000.