1. Home
  2. Computing & Technology
  3. Antivirus Software

A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z | Encyclopedia Home
Also see: Hoax Encyclopedia | Repair Center | News Briefs | Glossary | Infected Attachments | Prevention Center

Related Links

About.com Report
Threat List
F-Secure Description

Homepage
Aliases: VBSWG.X@mm
Type: Email/Internet Worm
Systems Affected: Win32 systems
Payload: Launches pornographic websites, impacts mail serversbelow.
ITW: Yes
Origin:
Description:

According to Mikko Hypponen of antivirus and security solutions developer F-Secure, the email carrying the virus has the following characteristics:

Subject:    Homepage
Body:       You've got to see this page! It's really cool ;O)

Attachment: homepage.HTML.vbs

If the attachment, homepage.HTML.vbs, is executed, the worm will mass-mail itself to all recipients listed in any Windows address book. The worm then deletes all the sent messages from the Sent folder and the Deleted Items folder with the subject line "Homepage". The worm then modifies the registry as an internal indicator to itself that the mailing routine has been performed:


HKey_Current_User\software\An\mailed

The Homepage worm then attempts to randomly open one of four x-rated web sites targeted in the worm's code.

While the worm does not contain a malicious payload per se, the affect on mail servers can be substantial as can the resulting undesirable public relations from having such a worm sent from your system.

About.com Special Features

Holiday Central

What to eat, where to go, fun things to do and how to save money on the perfect gifts. More >

Family Tech Center

Stay connected and entertained with reviews on tips on the latest HDTVs, cellphones and more. More >