Virus information
02/12/2001 - When ran, this script copies itself to the Windows directory as “AnnaKournikova.jpg.vbs” and attempts to mail separate e-mail messages using MAPI messaging, to all recipients in the Windows Address Book.
Symptoms
E-mails all individuals in the Windows Address Book.
Infects the registry adding the following two keys
HKEY_USERS.DEFAULT\Software\OnTheFlyHKEY_USERS.DEFAULT\Software\OnTheFly\mailed=1 or 0
On January 26th, the script attempts to connect to the website http://www.dynabyte.nl
How to detect virus
The virus is sent through mail with the following:
Subject: Here you have, :o)Body:Hi:Check This!
Attachment: AnnaKournikova.jpg.vbs
Method of removal
If you believe the computer is infected or the AnnaKournikova.jpg.vbs file is in the Windows directory, remove the virus by updating the computer antivirus scanner.
- How to update an antivirus program.
