- Discovered:
- May 20, 2003
- Updated:
- February 13, 2007 12:01:27 PM
- Type:
- Worm
- Systems Affected:
- Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP
W32.Vote.E@mm is a mass-mailing worm that attempts to use Microsoft Outlook to email itself to all the contacts in the Windows Address Book. It also attempts to overwrite and delete numerous files on an infected system.
The email has the following characteristics:
Subject: <Recipients.name>, <Random message>
Message: <Recipients.name>, THE WAR IS NOT A JOKE !...
THERE IS ONE BUILDING UP RIGHT NOW. Let's Unite In This Horrible Kaos. ...
Fight With Us....!!! ...And Let Us Remember Those Lost Souls !
WE COUNT ON YOU !
Greetings,
World War Veterans.
PS- See Attachments For War Info.
Attachment: USA.VS.IRAQ.scr, Plug-In_EXT.dll
W32.Vote.E@mm is written in Microsoft Visual Basic (VB). The VB run-time libraries must be installed for the worm to execute.
Antivirus Protection Dates
- Initial Rapid Release version May 21, 2003
- Latest Rapid Release version September 28, 2010 revision 054
- Initial Daily Certified version May 21, 2003
- Latest Daily Certified version September 28, 2010 revision 036
- Initial Weekly Certified release date May 21, 2003
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Threat Assessment
Wild
- Wild Level: Low
- Number of Infections: 0 - 49
- Number of Sites: 0 - 2
- Geographical Distribution: Low
- Threat Containment: Easy
- Removal: Easy
Damage
- Damage Level: Low
Distribution
- Distribution Level: Low
Writeup By: Scott Gettis



