VBS/SST@MM virus information

Updated: 03/10/2024 by Computer Hope

Virus information

02/12/2001 - When ran, this script copies itself to the Windows directory as "AnnaKournikova.jpg.vbs" and attempts to mail separate e-mail messages using MAPI (Messaging Application Programming Interface) messaging, to all recipients in the Windows Address Book.

Symptoms

E-mails all individuals in the Windows Address Book.

Infects the registry adding the following two keys

HKEY_USERS\.DEFAULT\Software\OnTheFly
HKEY_USERS\.DEFAULT\Software\OnTheFly\mailed=1 or 0

On January 26th, the script attempts to connect to the website http://www.dynabyte.nl

How to detect virus

The virus is sent through mail with the following:

Subject: Here you have, :o)
Body:

Hi:
Check This!

Attachment: AnnaKournikova.jpg.vbs

Method of removal

If you believe the computer is infected or the AnnaKournikova.jpg.vbs file is in the Windows directory, remove the virus by updating the computer antivirus scanner.