Technorati
Digg
Delicious
Reddit
StumbleUpon
Facebook
Yahoo
Twitter
Faves
Newsvine
- Discovered:
- November 18, 2002
- Updated:
- February 13, 2007 11:55:43 AM
- Type:
- Worm
- Systems Affected:
- Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP
W32.Stopin@mm is a mass-mailing worm that uses the default email program (as indicated in the registry) to send itself to all email addresses in the email program's inbox. The email message has the following characteristics,
Subject: Re: <the subject line of the incoming email>
Message:
Hi <the sender of the incoming email>, you wrote me :
##########
- <the message of the incoming email>
smtp.yahoo.com
##########
auto-reply:
I can not reply now.
Look at this attachment and mail me if you have some suggests
Attachment: The attachment contains a file that has two extensions (ending in .exe, .pif, .scr or .com).
The threat is written in the Microsoft C++ programming language.
Antivirus Protection Dates
- Initial Rapid Release version November 19, 2002
- Latest Rapid Release version September 28, 2010 revision 054
- Initial Daily Certified version November 19, 2002
- Latest Daily Certified version September 28, 2010 revision 036
- Initial Weekly Certified release date November 20, 2002
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Threat Assessment
Wild
- Wild Level: Low
- Number of Infections: 0 - 49
- Number of Sites: 0 - 2
- Geographical Distribution: Low
- Threat Containment: Easy
- Removal: Moderate
Damage
- Damage Level: Low
Distribution
- Distribution Level: High
Writeup By: Yana Liu
