SINGAPORE -- November 21, 2001 --

Date	November 21, 2001
Name :	W32.Aliz.Worm
Threat Assessment:	Level 3 (medium)
Discovered	May 2001
Description	W32.Aliz.Worm is a very simple SMTP mass mailer worm. The worm is written in assembly and is additionally packed. The worm propagates by obtaining email addresses from the Windows Address Book and sending itself to those addresses. When the worm arrives by email, the worm uses a MIME exploit allowing the virus to be executed just by reading or previewing the file. Information and a patch for this exploit can be found at: http://www.microsoft.com/technet/security/bulletin/MS01-020.asp
Definitions From Symantec	Certified definitions are available.
Symantec Security Response	Symantec Security Response is one of the industry’s largest dedicated team of virus experts. With offices located in the United States, Japan, Australia and the Netherlands, the sun never sets on Symantec Security Response. The centre’s mission is to provide swift, global responses to computer virus threats, proactively research and develop technologies that eliminate such threats and educate the public on safe computing practices. As new computer viruses appear, Symantec Security Response develops identification and detection for these viruses and provides either a repair or delete operation, thus keeping users protected against the latest virus threats http://securityresponse.symantec.com.
Symantec:	Symantec, a world leader in Internet security technology, provides a broad range of content and network security solutions to individuals and enterprises. The company is a leading provider of virus protection, vulnerability assessment, intrusion prevention, Internet content and e-mail filtering, remote management technologies and security services to enterprises around the world. Symantec’s Norton brand of consumer security products leads the market in worldwide retail sales and industry awards. Headquartered in Cupertino, Calif., Symantec has worldwide operations in 36 countries. For more information, please visit our Web site at www.symantec.com.