W32.Forever.Worm

Printer Friendly Page|Rate this page

Discovered:: March 27, 2001
Updated:: February 13, 2007 12:09:38 PM
Also Known As:: Win32.Rever [AVP, CA], W32/Forever [Sophos, McAfee], PE_REVER.A [Trend]
Type:: Worm
Systems Affected:: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP

Two variants of W32.Forever.Worm have been found. Each uses its own SMTP engine to spread itself. The email message has the following characteristics,

From: <support@microsoft.com>
Subject: Fix security problems with Internet Explorer 5 suite
Attachment: IE5patch.exe

Antivirus Protection Dates

Initial Rapid Release version March 27, 2001
Latest Rapid Release version January 7, 2011 revision 035
Initial Daily Certified version March 27, 2001
Latest Daily Certified version January 7, 2011 revision 037
Initial Weekly Certified release date March 28, 2001

Click for a more detailed description of Rapid Release and Daily Certified virus definitions.

Writeup By: Yana Liu

Technical Details

Search Threats

Search by name

Example: W32.Beagle.AG@mm

Internet Security Threat Report, Volume 16