Find a Partner
This window is encrypted for your security.
Need help? Ask the community or hire an expert.
Go to Avira Answers
The worm sends itself by email, to addresses found in Outlook. The email looks like this:
Subject: Here you have ;o)
Body: Hi: Check This!
When activated, the worm makes the following registry entry:
with the text
?Worm made with Vbswg1.05b?
This is the worm's signature.
First, the worm copies itself in Windows directory (usually C:\Windows) as: ?AnnaKournikova.jpg.vbs?.
After sending the emails, the worm makes a second registry entry:
with the value "1".
The messages are immediately deleted, after they are sent and do not appear in "Sent Items" folder.
The worm's code has another routine, too: on every January, 26th, it opens the Internet site http://www.dynabyte.nl. This is the site of a Netherlads computer magazine.
Description inserted by Crony Walker on Tuesday, June 15, 2004