W32.Sirhen.Worm

Discovered:
July 12, 2002
Updated:
February 13, 2007 11:39:40 AM
Type:
Worm
Systems Affected:
Windows 2000, Windows 98, Windows Me, Windows NT, Windows XP

There are several variants of W32.Sirhen.Worm. All are mass-mailing worms that are written in the Microsoft Visual Basic (VB) programming language. When W32.Sirhen.Worm runs, it attempts to send itself to all email addresses in the Microsoft Outlook Address Book.

This threat may appear in email in one of the following formats:

Subject: Reverendo
Message: El Reverendo del Infierno...
Attachments: Reverendo.scr

or

Subject: Zimexel
Message: Zimexel...see...Zimexel
Attachments: Zimexel.scr

or

Subject: Norton Antivirus Joke
Message: Is a Joke!! Is a Fake!! Seeeee!!
Attachments: Norton.scr

or

Subject: SirHenry!!! Mira que salvapantallas mas raro!!
Message: Mira a SirHenry!! Jajajaja!! No he visto cosa mas rara ni grande!
Attachments: SirHenry.scr

Antivirus Protection Dates

  • Initial Rapid Release version July 12, 2002
  • Latest Rapid Release version September 28, 2010 revision 054
  • Initial Daily Certified version July 12, 2002
  • Latest Daily Certified version September 28, 2010 revision 036
  • Initial Weekly Certified release date July 17, 2002
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Yana Liu

Search Threats

Search by name

Example: W32.Beagle.AG@mm
ThreatCon Widget
Internet Security Threat Report, Volume 16
Symantec DeepSight Screensaver