Technorati
Digg
Delicious
Reddit
StumbleUpon
Facebook
Yahoo
Twitter
Faves
Newsvine
- Discovered:
- July 24, 2003
- Updated:
- February 13, 2007 12:04:12 PM
- Type:
- Worm
- Systems Affected:
- Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP
W32.Liamed@mm is a mass-mailing worm that:
- Uses its own SMTP engine to send itself to all the contacts in Microsoft Windows Address Book
- Has backdoor functionality that can download files from the Internet and email stolen information to the author of the worm.
The subject line and the message body of the email use Chinese characters, and the attachment is titled "hello.exe."
The worm is written in the Microsoft C++ programming language and is compressed with UPX.
Antivirus Protection Dates
- Initial Rapid Release version July 25, 2003
- Latest Rapid Release version July 25, 2003
- Initial Daily Certified version July 25, 2003
- Latest Daily Certified version July 25, 2003
- Initial Weekly Certified release date July 30, 2003
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Threat Assessment
Wild
- Wild Level: Low
- Number of Infections: 0 - 49
- Number of Sites: 0 - 2
- Geographical Distribution: Low
- Threat Containment: Easy
- Removal: Easy
Damage
- Damage Level: Low
Distribution
- Distribution Level: Low
Writeup By: Yana Liu
