W32.Prolin.Worm

Risk Level 2: Low

Printer Friendly Page

Discovered: November 30, 2000
Updated: February 13, 2007 11:47:43 AM
Also Known As: TROJ_SHOCKWAVE.A, CREATIVE, TROJ_PROLIN.A
Type: Worm


W32.Prolin.Worm uses Microsoft Outlook to email a copy of itself to everyone in the Outlook address book. The worm moves all .mp3, .jpg, and .zip files to the root folder. It renames each of these files and appends the following text to the extension of each file:

change atleast now to LINUX

Protection

  • Initial Rapid Release version November 30, 2000
  • Latest Rapid Release version July 19, 2008 revision 019
  • Initial Daily Certified version November 30, 2000
  • Latest Daily Certified version January 20, 2009 revision 048
  • Initial Weekly Certified release date pending

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Medium
  • Number of Infections: 50 - 999
  • Number of Sites: More than 10
  • Geographical Distribution: Medium
  • Threat Containment: Easy
  • Removal: Moderate

Damage

  • Damage Level: Medium

Distribution

  • Distribution Level: High

Writeup By: Cary Ng
Search by name
Example: W32.Beagle.AG@mm
Limited Time Offers! Save up to 50%
Windows Vista Security