W32.Vote.E@mm

Risk Level 1: Very Low

Discovered:
May 20, 2003
Updated:
February 13, 2007 12:01:27 PM
Type:
Worm
Systems Affected:
Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP

W32.Vote.E@mm is a mass-mailing worm that attempts to use Microsoft Outlook to email itself to all the contacts in the Windows Address Book. It also attempts to overwrite and delete numerous files on an infected system.

The email has the following characteristics:

Subject: <Recipients.name>, <Random message>
Message: <Recipients.name>, THE WAR IS NOT A JOKE !...
THERE IS ONE BUILDING UP RIGHT NOW. Let's Unite In This Horrible Kaos. ...
Fight With Us....!!! ...And Let Us Remember Those Lost Souls !
WE COUNT ON YOU !
Greetings,
World War Veterans.
PS- See Attachments For War Info.
Attachment: USA.VS.IRAQ.scr, Plug-In_EXT.dll

W32.Vote.E@mm is written in Microsoft Visual Basic (VB). The VB run-time libraries must be installed for the worm to execute.

Antivirus Protection Dates

  • Initial Rapid Release version May 21, 2003
  • Latest Rapid Release version September 28, 2010 revision 054
  • Initial Daily Certified version May 21, 2003
  • Latest Daily Certified version September 28, 2010 revision 036
  • Initial Weekly Certified release date May 21, 2003
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 - 49
  • Number of Sites: 0 - 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Easy

Damage

  • Damage Level: Low

Distribution

  • Distribution Level: Low
Writeup By: Scott Gettis

Search Threats

Search by name

Example: W32.Beagle.AG@mm
ThreatCon Widget
Internet Security Threat Report, Volume 16
Symantec DeepSight Screensaver