VBS:SST-A
is an email worm written in Visual Basic Script (VBS).It arrives to the computer in a separate email with the following attributes:Subject: Here you have, ;0)
Body: Hi:
Check This!
and attachment: AnnaKournikova.jpg.vbs
As Anna Kournikova is one of the most popular tennis players, many people will try (similarly to LoveLetter incident) to open the jpeg picture and they will actually run the virus. When executed, virus copies itself to the Windows directory under the name AnnaKournikova.jpg.vbs and then emails itself to all recipients from Outlook address book.
The worm creates the following Registry item with several keys:
HKCUsoftwareOnTheFly
This worm does not have any destructive payload. It's only payload action is that on the 26th January it attempts to connect via browser to a website in the Netherlands, www.dynabyte.nl, which is dutch computershop-chain.
Any avast! with VPS file dated on or after
12th February 2001 is able to detect this virus.














