W32.Erah.A@mm

Risk Level 2: Low

Printer Friendly Page|Rate this page

Discovered:: May 30, 2003
Updated:: February 13, 2007 12:01:47 PM
Type:: Worm
Systems Affected:: Windows 95, Windows 98, Windows Me

W32.Erah.A@mm is a mass-mailing worm that sends itself to all the addresses in the Windows Address Book. The email message has the following characteristics:

Subject: The subject line will be one of the following:

FW: Your Hare is Balding
RE: You New Hare
FW: FW: FW: The Hare

Attachment: <original worm filename>

The above email routine will occur on the following days only:

January 1
February 14
April 1
April 21
July 4
August 12
October 1
November 14
December 25

Antivirus Protection Dates

Initial Rapid Release version May 30, 2003
Latest Rapid Release version February 3, 2011 revision 006
Initial Daily Certified version May 30, 2003
Latest Daily Certified version February 3, 2011 revision 020
Initial Weekly Certified release date June 4, 2003

Click for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

Wild Level: Low
Number of Infections: 0 - 49
Number of Sites: 0 - 2
Geographical Distribution: Low
Threat Containment: Easy
Removal: Easy

Damage

Damage Level: Low

Distribution

Distribution Level: High

Writeup By: Douglas Knowles

Technical Details

Search Threats

Search by name

Example: W32.Beagle.AG@mm

Internet Security Threat Report, Volume 16