W32.Mixor.C@mm

W32.Mixor.C@mm is a mass-mailing worm that copies itself to local folders and mapped network folders, infecting .exe and .scr files in those folders, and adds itself to .rar files. The infected files are detected as W32.Mixor!Inf. It also drops and executes Trojan.Galapoper.A.

Note: Virus definitions dated prior to November 2, 2006 may detect this as W32.Tigape.A@mm.

Protection

• Initial Rapid Release version October 31, 2006
• Latest Rapid Release version February 8, 2010 revision 007
• Initial Daily Certified version October 31, 2006
• Latest Daily Certified version February 8, 2010 revision 024
• Initial Weekly Certified release date November 1, 2006

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Medium
• Number of Infections: More than 1000
• Number of Sites: More than 10
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Moderate

Damage

• Damage Level: Medium

Distribution

• Distribution Level: High