WORM SPREADS IN THE WILD
Virus Name : VBS/VBSWG.AQ@mm
Alias : I-Worm.VBSWG.AQ,
Shakira worm, VBS_VBSWG.AQ
Virus type : Internet
level : Medium
Shakira worm aka
VBS/VBSWG.AQ is a Visual basic script worm uses
Microsoft outlook and mIRC to spread. The email
message subject will be "Shakira's Pics" and the attachment will
be "ShakiraPics.jpg.vbs" and the message body
i have sent the photos via attachment
have funn... ".
The VBS extension will
not appear if Windows Scripting Host is
installed. When you open the attachment, it
copies to windows folder. Then it opens the
Microsoft Outlook Address book and sends email to
all the addresses stored in that.
Shakira worm creates a
new key in the registry RUN section to load
automatically. It also modifies the script.ini in
the mIRC folder to infect mIRC users.
Shakira worm attempts to
overwrite all VBS and VBE
files in the local drives and network drives with
its own copy. Because of the mass mailing routine
there is a threat to down e-mail servers. Finally
it displays the message box "You
have been infected by the ShakiraPics Worm".
can I protect my system?
Solo has incorporated
VBS/VBSWG.AQ worm in its signature file to
protect users from this worm attack. Solo
antivirus registered users are already protected
from this worm. Make sure that you have installed
registered version of Solo Antivirus to protect
your system from all virus threats.
To protect your system
against infection, disable Windows Scripting
Host by following these steps: Click the Start
button, Settings, Control Panel, then select
Add/Remove Programs, then select the Windows
Setup tab, then double-click Accessories, scroll
down to Windows Scripting Host, and uncheck the
box. Save changes and close the window.
to remove this worm?
can check the system manually. Shakira worm
creates the file "ShakiraPics.jpg.vbs"
in the Windows folder. The presence of this file
ensures you are infected with this worm.
If you are already
infected with this worm, run Solo
Antivirus and choose delete option to remove worm
components. Solo antivirus can detect and
remove VBS/VBSWG.AQ@mm worm safely. Use
the following link to Download 30 day
trial version of Solo antivirus
remove viruses from your computer.
Solo anti-virus not only
scans for all viruses, it contains a unique System
Integrity Checker to protect you from
New Internet Worms, Backdoors and
malicious VB, Java Scripts. It also
effectively removes all existing Internet Worms,
File viruses, malicious VB, Java scripts,
Trojans, Backdoors, boot sector, partition table
and macro viruses.
purchase Solo antivirus using the link