VBS.XPMsg@mm is a simple Visual Basic Script (VBS) worm that sends email to all contacts in your Microsoft Outlook address book. It searches for all files that have extensions that begin with .ht; for example, .html, .hta, and .htm. It then copies itself to those files.

This worm inserts itself into the body of every email message that it mails out. The message has the following characteristics:

Subject: Fw: Nude Pic

Message: There's some great links at [pornographic website]. P.S. Don't tell the boss. :o)

It copy itself to all files (on all mapped and local drives) that have the .htm, .hta, .html file extensions.

After it has been mailed out, it creates the registry key:

HKEY_CURRENT_USER\Software\Microsoft\VBS.XPMsg

with the value

VBS.XPMsg@mm

After it has finished its viral actions, it displays the message:

You've been slammed by VBS/XPMsg@mm, a wonderful new work by FileSystemObject. Office XP bites! Get used to it!

VBS/XPMsg@mm is copyright (c) FileSystemObject, 2001 Thank you Microsoft! What would this world be without you...