Technorati
Digg
Delicious
Reddit
StumbleUpon
Facebook
Yahoo
Twitter
Faves
Newsvine
- Discovered:
- June 7, 2002
- Updated:
- February 13, 2007 11:59:00 AM
- Type:
- Worm
- Systems Affected:
- Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP
- CVE References:
- CVE-2001-0154
This worm is a variant of W32.Frethem.B@mm. It uses its own SMTP engine to send itself to email addresses that it finds in the Microsoft Windows Address Book and in .dbx files. The email message arrives with the following characteristics:
Subject: Re: Your password!
Message:
ATTENTION!
You can access very important information by this password
DO NOT SAVE password to disk
use your mind
now press cancel
Attachments: Decrypt-password.exe
Removal tool
Symantec has provided a tool to remove infections of W32.Frethem@mm. Click here to obtain the tool. This is the easiest way to remove these threats and should be tried first.
Antivirus Protection Dates
- Initial Rapid Release version June 8, 2002
- Latest Rapid Release version June 8, 2002
- Initial Daily Certified version June 8, 2002
- Latest Daily Certified version June 8, 2002
- Initial Weekly Certified release date June 8, 2002
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Threat Assessment
Wild
- Wild Level: Low
- Number of Infections: 0 - 49
- Number of Sites: 0 - 2
- Geographical Distribution: Low
- Threat Containment: Easy
- Removal: Easy
Damage
- Damage Level: Low
Distribution
- Distribution Level: High
Writeup By: Gor Nazaryan
