Sidlinger Computer Corporation Anna Virus Information (LAST UPDATED 16:30 CST)
This hit the Internet in a big way this morning (12-Feb-2001). It
was finally covered by CNN TV on Newsbrief at 16:26 CST today. It
is known by several names:
VBS.SST.A (AnnaKournikova)
VBS.SST-A (AnnaKournikova)
VBS/SST
VBS/SST @ MM (this is what Symantec is going with as a name, as of late
afternoon 12-Feb (see SARC link below)
VBS_Kalamar.a
SST
Onthefly
Here are SCC's initial warning letters: Warnings and a response: Response
Here are some links to news reports, all dated today (12-Feb-2001):
CNN (1514E): http://www.cnn.com/2001/TECH/internet/02/12/anna.worm/index.html
CNET (1230W): http://www.cnet.com/software/0-3746.html?tag=st.cn.1.tlpg.3746
CNET (1130W): http://news.cnet.com/news/0-1003-200-4792664.html?tag=st.sw.3746.txt.1003-200-4792664
MSNBC: http://www.msnbc.com/news/529834.asp?0na=21047L0-
ZDNet (Revised): http://www.zdnet.com/zdnn/stories/news/0,4586,2684605,00.html?chkpt=zdhpnews01
ZDNet(1208W): http://www.zdnet.com/zdnn/stories/news/0,4586,2684605,00.html
Here are ZDNet's prevention tips: http://www.zdnet.com/zdhelp/stories/main/0,5594,2684479-2,00.html
Here are links to VBS.SST.A listings by selected anti-virus software vendors:
McAfee AVERT: http://vil.nai.com/vil/virusChar.asp?virus_k=99011
McAfee added this link to a virus definition at 10:32 AM (PST?): http://vil.mcafee.com/dispVirus.asp?virus_k=99011&
Central Command has a fix:
http://avp.custhelp.com/cgi-bin/command/solution?11=010212-0007&130=0982002309&14=0&2715=&15=0&2716=&57=faq&58=&2900=ES5bDHekZo&25=6
VirusScan AsAP: http://hq.mycio.com/dispVirus.asp?virus_k=99011
F-Secure: http://www.f-secure.com/v-descs/onthefly.shtml
Computer Associates (CA) (Inoculate/T): http://www.ca.com/press/2001/02/sst_worm.htm
Symantec (Norton Anti-Virus) (as of 1654C): www.sarc.com
now lists Anna, although there is no fix yet available:
http://www.sarc.com/avcenter/venc/data/vbs.sst@mm.html
"The Symantec AntiVirus Research Center (SARC) has confirmed a new
mass-mailing worm. SARC is currently analyzing the worm. The worm is being
reported in an attachment named VBS.SST @ mm (ANNAKOURNIKOVA.JPG.VBS)."
Virus definitions:
Pending
Central Command (AVX Professional) has released a free removal tool.
Here's the link: ftp://ftp.avx.com/tools/antisst.exe
SCC has not yet tested this.