W32.BleBla.J.Worm

W32.Blebla.J.Worm is a variant of W32.Blebla.B.Worm. W32.Blebla.J.Worm arrives as an email message that has an HTML body and two attachments: Melh32.exe and Melhw32.chm. When you read the message, the two attachments are automatically saved and launched. The worm then attempts to send itself to all contacts in the Microsoft Outlook Address Book and post messages to a newsgroup. The worm also alters registry keys so that it runs when certain types of files are viewed or executed.

Protection

• Initial Rapid Release version August 2, 2002
• Latest Rapid Release version July 19, 2008 revision 019
• Initial Daily Certified version August 2, 2002
• Latest Daily Certified version January 20, 2009 revision 048
• Initial Weekly Certified release date August 7, 2002

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Easy

Damage

• Damage Level: Medium

Distribution

• Distribution Level: Medium