W32.Fusic@mm

Risk Level 2: Low

Printer Friendly Page|Rate this page

Discovered:: November 22, 2002
Updated:: February 13, 2007 11:47:28 AM
Type:: Worm
Systems Affected:: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP

W32.Fusic@mm is a mass-mailing worm with backdoor capabilities that replicates by email. It uses MAPI to send itself to the contacts in the Windows Address Book. The email message has the following (randomly chosen) characteristics :

Subject: To be my friend?
Message Body: To be my friend?Please look at my photos in the attachment
Attachment: My introduction and photos.exe

Subject: resume
Message Body: Please look at my resume
Attachment: My resume.exe

Subject: Funny movie
Message Body: Funny flash movie
Attachment: Funny movie.exe

Subject: Document you want
Message Body: What you want is in the attachment
Attachment: Readme.exe

Antivirus Protection Dates

Initial Rapid Release version November 22, 2002
Latest Rapid Release version November 22, 2002
Initial Daily Certified version November 22, 2002
Latest Daily Certified version November 22, 2002
Initial Weekly Certified release date November 28, 2002

Click for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

Wild Level: Low
Number of Infections: 0 - 49
Number of Sites: 0 - 2
Geographical Distribution: Low
Threat Containment: Easy
Removal: Easy

Damage

Damage Level: Low

Distribution

Distribution Level: Medium

Writeup By: Serghei Sevcenco

Technical Details

Search Threats

Search by name

Example: W32.Beagle.AG@mm

Internet Security Threat Report, Volume 16