W32.Pet_Tick.G

W32.Pet_Tick.G is a mass-mailing worm that:

• Infects all the .html files in the \Windows folder
• Sends country information, which it finds in the Win.ini file, to the attacker
• Sends copies of the worm to mailto: address, which it finds in the cache folder of Internet Explorer
• May also modify the Win.ini file

Virus definitions dated prior to July 13, 2001 detect this threat as W32.Malot.int.



Due to bugs, this worm:

• May cause system instability or cause the system to stop responding when the worm is run.
• Repeatedly infects files in the \Windows folder.

Protection

• Initial Rapid Release version July 10, 2001
• Latest Rapid Release version March 3, 2008 revision 035
• Initial Daily Certified version July 10, 2001
• Latest Daily Certified version June 17, 2008 revision 017
• Initial Weekly Certified release date July 10, 2001

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Moderate

Damage

• Damage Level: Low

Distribution

• Distribution Level: High