VBS:VBSWG-X (known also as VBS:HomePage)

is an email worm written in Visual Basic Script (VBS). It arrives to the computer in a separate email with the following attributes:
Subject:           Homepage
Body:              Hi! You've got to see this page! It's really cool ;O)
and attachment:  HOMEPAGE.HTML.VBS

The attached file contains the script virus itself , which is activated by clicking on its icon. It drops a copy of itself in the Windows directory as "HOMEPAGE.HTML.VBS."

It then checks for the registry entry to see if email has already been sent out to all addresses in the address book. If the infected system does not have MS Outlook, the worm cannot propagate.

After sending out email, the worm tries to open one of the following pornographic sites with Internet Explorer:
http://hardcore.pornbillboard.net/shannon/1.htm
http://members.nbci.com/_XMCM/prinzje/1.htm
http://www2.sexcropolis.com/amateur/sheila/1.htm
http://sheila.issexy.tv/1.htm

Then the worm checks if the email that it sent out exists in the MS Outlook Inbox and Deleted Items folder, by looking for the subject "Homepage." When it finds email with the subject "Homepage" in these folders, the worm
deletes the email to prevent detection.

Any avast! with VPS file dated on or after 2nd March 2001 is able to detect this virus as a "VBS:VBSWG [Encr] family".