VBS/SST Worm

 Information about the VBS/SST worm:

VBS/SST is an encrypted email worm that is created using a Worm Generating tool. This worm will infect Windows 98 and Windows 2000 systems. Windows 95 and Windows NT users also can be affected if the Visual Basic scripting is enabled.

The worm arrives with the subject:

Here you have, ;o)

The body of the message reads:

Hi: Check This!

Infected email carries an attachment called AnnaKournikova.jpg.vbs. When the attachment is executed it copies itself to the WINDOWS directory. After this it creates a registry key:

HKEY_CURRENT_USER\Software\OnTheFly

Later on worm checks for mass mailing routine has been executed or not. If not, the worm emails everyone in Microsoft Outlook address book and creates the registry key:

HKEY_CURRENT_USER\Software\OnTheFly\mailed

If the system date is January 26, the worm attempts to connect Web browser to an Internet address in The Netherlands.

The VBS/SST first appeared in the wild during February 2001.

 Other names of VBS/SST worm:

This worm is also known as Anna Kournikova,Kalamar, VBS/VBSWG.J, VBS/Onthefly.A.

 Removing VBS/SST worm from your computer:

You can remove this worm from your computer by using Protector Plus antivirus software.