- Discovered:
- July 12, 2002
- Updated:
- February 13, 2007 11:39:40 AM
- Type:
- Worm
- Systems Affected:
- Windows 2000, Windows 98, Windows Me, Windows NT, Windows XP
There are several variants of W32.Sirhen.Worm. All are mass-mailing worms that are written in the Microsoft Visual Basic (VB) programming language. When W32.Sirhen.Worm runs, it attempts to send itself to all email addresses in the Microsoft Outlook Address Book.
This threat may appear in email in one of the following formats:
Subject: Reverendo
Message: El Reverendo del Infierno...
Attachments: Reverendo.scr
or
Subject: Zimexel
Message: Zimexel...see...Zimexel
Attachments: Zimexel.scr
or
Subject: Norton Antivirus Joke
Message: Is a Joke!! Is a Fake!! Seeeee!!
Attachments: Norton.scr
or
Subject: SirHenry!!! Mira que salvapantallas mas raro!!
Message: Mira a SirHenry!! Jajajaja!! No he visto cosa mas rara ni grande!
Attachments: SirHenry.scr
Antivirus Protection Dates
- Initial Rapid Release version July 12, 2002
- Latest Rapid Release version September 28, 2010 revision 054
- Initial Daily Certified version July 12, 2002
- Latest Daily Certified version September 28, 2010 revision 036
- Initial Weekly Certified release date July 17, 2002
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Yana Liu



