NOTE: Virus definitions dated prior to July 17, 2002 detect this as W32.Frethem.J@mm.
W32.Frethem.K@mm is a worm, and is a variant of
W32.Frethem.B@mm. It uses its own SMTP engine to send itself to email addresses that it finds in the Microsoft Windows Address Book and in .dbx, .wab, .mbx, .eml, and .mdb files. The email message arrives with the following characteristics:
Subject: Re: Your password!
Attachments: Decrypt-password.exe and Password.txt
Removal tool
Symantec has provided a tool to remove infections of
W32.Frethem@mm. Click
here to obtain the tool.
This is the easiest way to remove these threats and should be tried first.
Click for a more detailed description of Rapid Release and Daily Certified virus definitions.
