W32.Vivael@mm

Risk Level 2: Low

Printer Friendly Page

Discovered: June 28, 2003
Updated: February 13, 2007 12:03:04 PM
Also Known As: WORM_COLEVO.A [Trend], W32/Colevo@MM [McAfee], I-Worm.Colevo [KAV]
Type: Worm
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP


W32.Vivael@mm is a mass-mailing worm that uses its own SMTP engine to send itself to all the MSN messenger contacts of the user.
The email has the following characteristics:

Subject: El adelanto de matrix ta gueno

Message:
Oye te ? paso el programa para entrar a cuentas del messenger
Z y facilingo te lo paso a voz nomas, prometeme que no se lo pasas a nadie, ya?
u Respondeme que tal te parecio. chau

Attachment: hotmailpass.exe

Protection

  • Initial Rapid Release version June 28, 2003
  • Latest Rapid Release version September 24, 2009 revision 033
  • Initial Daily Certified version June 28, 2003
  • Latest Daily Certified version September 24, 2009 revision 024
  • Initial Weekly Certified release date June 28, 2003

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 - 49
  • Number of Sites: 3 - 9
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Difficult

Damage

  • Damage Level: Low

Distribution

  • Distribution Level: High

Writeup By: Yana Liu
Search by name
Example: W32.Beagle.AG@mm
File Your Taxes Worry-Free
ThreatCon Widget