W32.Apost.Worm@mm

NOTE: The worm was previously known as W32.Urgent.worm@mm. Due to a decrease in submissions, the threat level has been downgraded from 3 to 2.

This worm is a Visual Basic Application that arrives as the attachment Readme.exe. It requires the Microsoft Visual Basic Runtime Libraries to replicate.

The body of the email asks the recipient to review the attachment, but after it has been viewed it copies itself to the system and spreads itself to everyone in the Microsoft Outlook address book.

Protection

• Initial Rapid Release version September 4, 2001
• Latest Rapid Release version July 19, 2008 revision 019
• Initial Daily Certified version September 4, 2001
• Latest Daily Certified version January 20, 2009 revision 048
• Initial Weekly Certified release date September 4, 2001

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 50 - 999
• Number of Sites: More than 10
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Moderate

Damage

• Damage Level: Low

Distribution

• Distribution Level: High