W32.Cervivec.A@mm

W32.Cervivec.A@mm is a mass-mailing worm that is written in Delphi. The worm is packed with a known runtime compression program. When executed, the worm attempts to find email addresses belonging to contacts in the ICQ contact list, and then to send email to them.

Protection

• Initial Rapid Release version March 22, 2002
• Latest Rapid Release version January 20, 2009 revision 039
• Initial Daily Certified version March 22, 2002
• Latest Daily Certified version January 20, 2009 revision 037
• Initial Weekly Certified release date March 27, 2002

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: More than 1000
• Number of Sites: More than 10
• Geographical Distribution: Medium
• Threat Containment: Easy
• Removal: Moderate

Damage

• Damage Level: Low

Distribution

• Distribution Level: High