[email protected]
Aliases: I-Worm.Spdtest, VBS/[email protected], VBS/SpeedTest-A, VBS/Spdtest*, VBS_SPESTER.A,
Variants: Worm/SpdText, VBS/[email protected], VBS:Generic-Mail, I-Worm/Spdtest, [email protected],
Classification: Malware
Category: Computer Worm
Status: Active & Spreading
Spreading: Fast
Geographical info: Asia, North and South America, and some parts of Europe and Australia
Removal: Easy
Platform: W32
Discovered: 11 Jan 2002
Damage: Low
Characteristics: The [email protected] application is a worm that multiplies as a .zip file. Within the .zip file is the worm executable file. When opened, the executable makes a (.vbs) or Visual Basic Script files that try to send the compressed file to all contacts in the address book.
[email protected] Removal Tool
If you have Malware on your computer it will cause annoyances and will damage your system. You should either:
A. Manually remove the infected files from your computer, or
B. Automatically scan your system using trusted software
A. Manually remove the infected files from your computer, or
B. Automatically scan your system using trusted software
RECOMMENDED:
We recommend that you scan your system for malware. Our partner has a computer worm removal tool to automatically clean [email protected] from your computer.
More details about [email protected]
The [email protected] application is a worm that multiplies as a “.zip” file. W/in the “.zip” file is the worm “.exe” file. When the worm is opened, the executable or .exe files makes a “.vbs” or Visual Basic Script file that tries to send the compressed “.zip” file to all contacts in the address book. If the [email protected] worm is extracted from the “.zip” file and opened, it makes the Visual Basic Script or .vbs file “C:\Program Files\Internet Explorer\OneClock.vbs”, which the attempts to email messages to all contacts in the address book. The email message has the following characteristics: “Subject: game: Speed tester v. 1.0 - check your mouse skills”, “Message: Hello, How good are your mouse movement skills? Wanna test it? If yes try game Speed tester v.1.0. (you have it in attachment)”, and “Attachment: Spdtest.zip and Oneclock.vbs.The [email protected] worm also adds the value “OneClock wscript C:\Program Files\Internet Explorer\oneclock.vbs” to the registry key, so that it opens every time you open the Windows. The [email protected] also tries to multiply making use of the mIRC by making the file “Script,ini” in the “\Mirc” folder (if you have mIRC folder). The [email protected] tries to cover itself as a joke software by asking you to push a button. When you do, it shows a message that you are very slow. After showing this message, the software pretends to configure drive C.