==============================================<BR>VBS/VBSWG.X.Worm (also known as VBS.Homepage)<BR>==============================================<P>VBS/VBSWG.X.Worm<P>VBSWG.X is a new e-mail worm spreading through<BR>Microsoft Outlook and is yet another variant<BR>generated by the VBS Worm Generator Kit.<P>The worm arrives as a message with the Subject<BR>line:<P>"Homepage"<P>and the message body:<P>"Hi!<BR>You've got to see this page! It's really cool ;O)"<P>The attached file, which contains the worm code,<BR>is named:<P>"HOMEPAGE.HTML.VBS"<P>When the attached code is executed, VBSWG.X<BR>saves a copy of its code to the Temp directory<BR>and then mails itself out to all recipients<BR>listed in all address books.<P>Once the mailing procedure is completed, the<BR>worm modifies the registry entry (sets it to<BR>1):<P>HKEY_CURRENT_USER\Software\An\mailed<P>Next, the worm browses through the Inbox and<BR>Deleted Outlook folders and deletes all<BR>messages with the same Subject line as the<BR>worm's one ("Homepage").<P>Finally, VBSWG.X uses a default Web browser<BR>to open one of four pornographic web sites.