- Discovered:
- March 13, 2003
- Updated:
- February 13, 2007 11:44:22 AM
- Also Known As:
- W32/Bibrog.c@mm [McAfee], W32/Bibrog.d@mm[McAfee]
- Type:
- Worm
- Systems Affected:
- Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP
W32.Bibrog.C@mm is a mass-mailing worm that uses Microsoft Outlook to send itself to all the contacts in the Outlook Address Book.
When the worm is executed, it:
- Opens a program that looks like a shooting game
- May also change your Windows wallpaper
The email message has the following characteristics:
Subject: Fwd:La Academia Azteca
Message: La cacademia azteca (muy bueno) ¡no es virus!
Attachment: Academia.exe
This worm also attempts to spread through the KaZaA, Grokster, and Morpheus file-sharing networks, as well as through ICQ.
Several minor variants of W32.Bibrog.C@mm have been found. They are all written with the Microsoft Visual Basic programming language and may be compressed with UPX.
Antivirus Protection Dates
- Initial Rapid Release version March 14, 2003
- Latest Rapid Release version September 28, 2010 revision 054
- Initial Daily Certified version March 14, 2003
- Latest Daily Certified version September 28, 2010 revision 036
- Initial Weekly Certified release date March 19, 2003
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Threat Assessment
Wild
- Wild Level: Low
- Number of Infections: 0 - 49
- Number of Sites: 0 - 2
- Geographical Distribution: Low
- Threat Containment: Easy
- Removal: Easy
Damage
- Damage Level: Low
Distribution
- Distribution Level: Low
Writeup By: Yana Liu



