FIX for VIRUS (safe to execute!)

From: Jason L. Dickman (
Date: Tue Feb 13 2001 - 16:40:09 EET

I agree with Derek, this is a pain.
I have done some searching and found the following info about this latest

VBS.SST.A is an encrypted Visual Basic Script worm.
The worm travels via an email message with the following text:
Subject line: Here you have, ;0)
Message body:
Check This!
File attachment: AnnaKournikova.jpg.vbs
The worm attempts to trick users into executing the file attached
to the e-mail message by pretending to be a jpeg graphic image of
the Russian tennis player Anna Kournikova.
On January 26th the worm attempts to connect to a website

The worm modifies the systems registry by creating an entry named

When the worm is activated it emails itself to every address in the
Outlook address book

THE FIX____________________________________________________________

Run the attached

If it tells you to restart your machine then it was infected...
After you restart run this program again and it should tell you "no virus
I hope this helps...


Jason L. Dickman
VP Lab Operations
Shared Replicators, Inc.
3638 South Memorial Dr.
Tulsa, OK USA
Voice: 918-270-8923
Fax: 918-622-1138

For more information about the rp-ml, see

This archive was generated by hypermail 2.1.2 : Fri Jan 04 2002 - 09:56:50 EET