1. /
  2. Security Response/
  3. W32.Frethem.O@mm

W32.Frethem.O@mm

Risk Level 2: Low

Discovered:
July 16, 2002
Updated:
February 13, 2007 11:46:43 AM
Type:
Worm
Systems Affected:
Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP
CVE References:
CVE-2001-0154

W32.Frethem.O@mm is a worm, and is a variant of W32.Frethem.B@mm. It uses its own SMTP engine to send itself to email addresses that it finds in the Microsoft Windows Address Book and in .dbx, .wab, .mbx, .eml, and .mdb files. The email message arrives with the following characteristics:

Subject: Re: Your password!
Attachments: Decrypt-password.exe and Password.txt



Antivirus Protection Dates

  • Initial Rapid Release version July 16, 2002
  • Latest Rapid Release version July 16, 2002
  • Initial Daily Certified version July 16, 2002
  • Latest Daily Certified version July 16, 2002
  • Initial Weekly Certified release date July 17, 2002
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 - 49
  • Number of Sites: 0 - 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Easy

Damage

  • Damage Level: Low

Distribution

  • Distribution Level: High
Writeup By: Douglas Knowles

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report, Volume 17
Symantec DeepSight Screensaver