Symantec.com > Enterprise > Security Response > W32.Frethem.B@mm

W32.Frethem.B@mm

Risk Level 2: Low

Discovered:
June 3, 2002
Updated:
February 13, 2007 11:39:10 AM
Also Known As:
WORM_FRETHEM.B [Trend]
Type:
Worm


W32.Frethem.B@mm is a variant of the W32.Frethem.A@mm worm. It obtains the computer user's SMTP server information and email addresses using the same method as W32.Frethem.A@mm. However, W32.Frethem.B@mm has different email characteristics. The email will arrive in the following format:
Subject: Re: Your password!
Attachment: Your password placed in password.txt            yourpassword.exe

Removal tool
Symantec has provided a tool to remove infections of W32.Frethem@mm. Click here to obtain the tool. This is the easiest way to remove these threats and should be tried first.

Antivirus Protection Dates

  • Initial Rapid Release version June 4, 2002
  • Latest Rapid Release version June 4, 2002
  • Initial Daily Certified version June 4, 2002
  • Latest Daily Certified version June 4, 2002
  • Initial Weekly Certified release date June 5, 2002
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 - 49
  • Number of Sites: 0 - 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Easy

Damage

  • Damage Level: Low

Distribution

  • Distribution Level: High
Writeup By: Yana Liu

Search Threats

Search by name

Example: W32.Beagle.AG@mm
ThreatCon Widget
Internet Security Threat Report, Volume 16
Symantec DeepSight Screensaver