Discovered on: June 5, 2004Description:
VBS.Pub is a VBScript file-infecting and mass-mailing worm. VBS.Pub
infects the files that have the .asp, .hta, .htm, .htt, .html, .vbe, and
.vbs. file extensions.
The worm also uses Microsoft Outlook to send itself to everyone in the
Microsoft Outlook Address Book.
If the day is the 6th, 13th, 21st, or 28th, the worm will delete all the
files from the computer.
Removal Instructions For Symantec & Norton Users:
- Disable System Restore (Windows Me/XP).
- Update the virus definitions.
- Run a full system scan and delete all the files detected as VBS.Pub.
