Search Solo Products, Services and others Overview of the Site Design and Build a Career Contact us for customer service and other feedback info SRN Micro Privacy Statement

 


VBS/VBSWG.AQ WORM SPREADS IN THE WILD

Virus Name  : VBS/VBSWG.AQ@mm

Alias             : I-Worm.VBSWG.AQ, Shakira worm, VBS_VBSWG.AQ

Virus type    : Internet worm

Threat level : Medium

Virus details :

                     Shakira worm aka VBS/VBSWG.AQ is a Visual basic script worm uses Microsoft outlook and mIRC to spread. The email message subject will be "Shakira's Pics" and the attachment will be "ShakiraPics.jpg.vbs" and the message body will be
"Hi :
i have sent the photos via attachment
have funn... ".

                     The VBS extension will not appear if Windows Scripting Host is installed. When you open the attachment, it copies to windows folder. Then it opens the Microsoft Outlook Address book and sends email to all the addresses stored in that.

                     Shakira worm creates a new key in the registry RUN section to load automatically. It also modifies the script.ini in the mIRC folder to infect mIRC users.

                     Shakira worm attempts to overwrite all VBS and VBE files in the local drives and network drives with its own copy. Because of the mass mailing routine there is a threat to down e-mail servers. Finally it displays the message box "You have been infected by the ShakiraPics Worm".

How can I protect my system?

                   Solo has incorporated VBS/VBSWG.AQ worm in its signature file to protect users from this worm attack. Solo antivirus registered users are already protected from this worm. Make sure that you have installed registered version of Solo Antivirus to protect your system from all virus threats.

                     To protect your system against infection, disable Windows Scripting Host by following these steps: Click the Start button, Settings, Control Panel, then select Add/Remove Programs, then select the Windows Setup tab, then double-click Accessories, scroll down to Windows Scripting Host, and uncheck the box. Save changes and close the window.

How to remove this worm?

                   You can check the system manually. Shakira worm creates the file "ShakiraPics.jpg.vbs" in the Windows folder. The presence of this file ensures you are infected with this worm.

                   If you are already infected with this worm, run Solo Antivirus and choose delete option to remove worm components. Solo antivirus can detect and remove VBS/VBSWG.AQ@mm worm safely. Use the following link to Download 30 day trial version of Solo antivirus to remove viruses from your computer.

                   Solo anti-virus not only scans for all viruses, it contains a unique System Integrity Checker to protect you from New Internet Worms, Backdoors and malicious VB, Java Scripts. It also effectively removes all existing Internet Worms, File viruses, malicious VB, Java scripts, Trojans, Backdoors, boot sector, partition table and macro viruses.

You can purchase Solo antivirus using the link