- Discovered:
- June 3, 2002
- Updated:
- February 13, 2007 11:39:10 AM
- Also Known As:
- WORM_FRETHEM.B [Trend]
- Type:
- Worm
W32.Frethem.B@mm is a variant of the W32.Frethem.A@mm worm. It obtains the computer user's SMTP server information and email addresses using the same method as W32.Frethem.A@mm. However, W32.Frethem.B@mm has different email characteristics. The email will arrive in the following format:
Subject: Re: Your password!
Attachment: Your password placed in password.txt yourpassword.exe
Removal tool
Symantec has provided a tool to remove infections of W32.Frethem@mm. Click here to obtain the tool. This is the easiest way to remove these threats and should be tried first.
Antivirus Protection Dates
- Initial Rapid Release version June 4, 2002
- Latest Rapid Release version June 4, 2002
- Initial Daily Certified version June 4, 2002
- Latest Daily Certified version June 4, 2002
- Initial Weekly Certified release date June 5, 2002
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Threat Assessment
Wild
- Wild Level: Low
- Number of Infections: 0 - 49
- Number of Sites: 0 - 2
- Geographical Distribution: Low
- Threat Containment: Easy
- Removal: Easy
Damage
- Damage Level: Low
Distribution
- Distribution Level: High
Writeup By: Yana Liu







