VBS.Pub

VBS.Pub is a VBScript file-infecting and mass-mailing worm. VBS.Pub infects the files that have the .asp, .hta, .htm, .htt, .html, .vbe, and .vbs. file extensions.

The worm also uses Microsoft Outlook to send itself to everyone in the Microsoft Outlook Address Book.

If the day is the 6th, 13th, 21st, or 28th, the worm will delete all the files from the computer.

Protection

• Initial Rapid Release version June 6, 2004
• Latest Rapid Release version June 6, 2004
• Initial Daily Certified version June 6, 2004
• Latest Daily Certified version June 6, 2004
• Initial Weekly Certified release date June 7, 2004

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Easy

Damage

• Damage Level: High

Distribution

• Distribution Level: High