W32.Frethem.E@mm

This worm is a variant of W32.Frethem.A@mm. It uses its own SMTP engine to send itself to email addresses that it finds in the Microsoft Windows Address Book and in .dbx files. The email message arrives with the following characteristics:
Subject: Re: Do your Windows looks like Windows XP? I have found very nice desktop themes!
Attachment: www.xpdesktopthemes.com

NOTE: Virus definitions dated prior to July 17, 2002 detect this as W32.Frethem.Gen@mm.

Removal tool
Symantec has provided a tool to remove infections of W32.Frethem@mm. Click here to obtain the tool. This is the easiest way to remove these threats and should be tried first.

Protection

• Initial Rapid Release version July 17, 2002
• Latest Rapid Release version July 17, 2002
• Initial Daily Certified version July 17, 2002
• Latest Daily Certified version July 17, 2002
• Initial Weekly Certified release date July 17, 2002

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.