W32.Forlorn@mm

Discovered:
August 5, 2002
Updated:
February 13, 2007 11:39:56 AM
Type:
Worm
Systems Affected:
Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP

W32.Forlorn@mm is a mass-mailing worm. It uses Microsoft Outlook or its own SMTP engine to send itself to email addresses that it finds in the Microsoft Outlook Address Book or Windows Address Book. The email message arrives with the following characteristics:

From: Support@symantec.com
Subject: Free Virus Removal Tool from Symantec
Attachment:Free Virus Removal Tool From Norton.exe

The worm is written in Borland Delphi Programming Language and compressed with UPX.

Antivirus Protection Dates

  • Initial Rapid Release version August 5, 2002
  • Latest Rapid Release version April 28, 2011 revision 009
  • Initial Daily Certified version August 5, 2002
  • Latest Daily Certified version April 28, 2011 revision 019
  • Initial Weekly Certified release date August 7, 2002
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Yana Liu

Search Threats

Search by name

Example: W32.Beagle.AG@mm
ThreatCon Widget
Internet Security Threat Report, Volume 16
Symantec DeepSight Screensaver