W32.Assarm@mm

W32.Assarm@mm is a mass-mailing worm that sends messages in reply to all unread messages in the Microsoft Outlook Mailbox. The email messages are not sent if the day of the week is Monday or Thursday and the hour of the time of day is greater than 5. For example, if the time is 4:00 A.M or 4:00 P.M., the message will be sent; if the time is 6:00 A.M or 6:00 P.M., it will not be sent.

The subject of the email message is "Re: <original message subject line>." The attachment varies.

Protection

• Initial Rapid Release version August 2, 2002
• Latest Rapid Release version December 31, 2008 revision 037
• Initial Daily Certified version August 2, 2002
• Latest Daily Certified version December 31, 2008 revision 041
• Initial Weekly Certified release date August 7, 2002

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Easy

Damage

• Damage Level: Low

Distribution

• Distribution Level: Medium