Internet Insider with David Radin
Internet Insider
Listen/Station List
Show Highlights
Guest List
Free Insider Tip Letter
Talk Back
The Insider Team
The WOW
The Stellar List
The Insider Tip
Internet Insider Home

Insider Extras
Insider In-Depth
Insider Tip Letter
Step Up to the Mic
Insider Archives
Insider Guides
The Anti-Virus Page
The Megabyte

Outside the Studio
Our Sponsors
To Sponsor or Advertise
Broadcast the Show
Bookstore
Press Room
Editorial Submissions
Employment
FAQ
Link to Us
Site Map
About Us
Insider Radio Home

Click here to hear great short radio shows, learn helpful computer ideas or subscribe to David's Tip Letter
Insider Radio Network

February 12, 2000

The Anna Virus - Page 1

The Anna Virus is posed to have an effect similar in scope to last year's Love Bug virus. The virus is a VBScript worm that spreads itself by emailing itself as an attachment to everyone in your Microsoft Outlook Contacts list. The virus's damage is limited, however. If the date on your computer is January 26th, the virus will open your browser and attempt to connect to a web site in the Netherlands.

Here are details concerning the virus:

  • Subject: Here you have, ;o)
    Here you are, ;o)
    or Here you go, ;o)

  • Name of Attachment: AnnaKournikova.jpg.vbs

  • Message Body: Hi: Check This!
The worm creates a file called AnnaKournikova.jpg.vbs in the Windows directory, and modifies one of the Windows Registry Keys. If the virus is deleted from the Windows directory, it recreates itself, but due to a bug in the code, the virus recreates itself as a zero byte file.

Removing The Infection Manually

Removing this virus infection manually requires editing your Windows registry. The registry controls all of the your PC's important functions. A misstep when editing the registry can be disastrous. We highly recommend that you typically do not edit the registry yourself, and we cannot be held responsible for any difficulties you may encounter.

In order to remove this virus infection manually:

  1. Go to the [Start] menu and select [Run].



  2. In the Run window, type regedit, and then click on [OK]. This opens the Regisry Editor.



  3. Click on the plus sign to the left of HKEY_CURRENT_USER. Click on the plus sign to the left of the Software folder. Right-click on the OnTheFly folder and select [Delete] from the context menu.

  4. Next, delete all instances of the file AnnaKournikova.jpg.vbs from your system. There may be multiple copies, including one that is 0 bytes in size.

  5. Be sure to delete all instances of the infected email from your Inbox, and then delete all items from the Deleted Items folder.

Microsoft Outlook Security Patch

Note: Installing the Microsoft Outlook Security Patch will prevent reception of emails containing this type of virus.

Anna Virus Page 2 - links to various anti-virus software company pages that pertain specifically to this virus
Anna Virus Page 3 - What does Anna think?