Symantec.com > Enterprise > Security Response > W32.Fishlet.A@mm

W32.Fishlet.A@mm

Risk Level 2: Low

Discovered:
June 10, 2002
Updated:
February 13, 2007 11:58:59 AM
Type:
Worm
Systems Affected:
Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP

W32.Fishlet.A@mm is mass-mailing worm which is written in Visual Basic. It uses its own SMTP engine to send itself out to email addresses that it finds in the Microsoft Windows Address Book.

The email message arrives with the following characteristics:

To: Ebay Taker
From: eMarket Services [orderprocesing@reply.ebay.com]
Subject: Order
Attachment: ######.exe (where ###### is a random name)

Antivirus Protection Dates

  • Initial Rapid Release version June 10, 2002
  • Latest Rapid Release version September 28, 2010 revision 054
  • Initial Daily Certified version June 10, 2002
  • Latest Daily Certified version September 28, 2010 revision 036
  • Initial Weekly Certified release date June 12, 2002
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 - 49
  • Number of Sites: 0 - 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Easy

Damage

  • Damage Level: Low

Distribution

  • Distribution Level: High
Writeup By: Atli Gudmundsson

Search Threats

Search by name

Example: W32.Beagle.AG@mm
ThreatCon Widget
Internet Security Threat Report, Volume 16
Symantec DeepSight Screensaver