Discovered: January 28, 2003
Updated: February 13, 2007 11:42:41 AM
Also Known As: I-Worm.Serotin[Kaspersky Lab]
Type: Worm
Systems Affected: Windows 2000, Windows NT, Windows XP
W32.Serot@mm is a concept worm that targets .NET (MSIL) .exe files.
W32.Serot@mm attempts to send itself to all email addresses in the Windows Address Book and those that it finds in the Internet Explorer cache folder. It does not have any significant chance of becoming widespread.
It appears that the author of this worm is attempting to investigate .NET exploits and demonstrate some tricks.
For more information on .NET technology, please go to
http://www.microsoft.com/net/.
NOTE: The .NET SDK must be installed on the computer for this worm to replicate to .NET files.
Protection
-
Initial Rapid Release version January 29, 2003
-
Latest Rapid Release version January 22, 2010 revision 041
-
Initial Daily Certified version January 29, 2003
-
Latest Daily Certified version January 22, 2010 revision 048
-
Initial Weekly Certified release date January 29, 2003
Click for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Robert X Wang