W32.Zezer.Worm

W32.Zezer.Worm is a worm that sends itself by email to all the Hotmail addresses that it finds on your MSN Messenger contact list.

It steals cached network passwords and can terminate the processes of some security software.

The worm is written in Microsoft Visual Basic 6 and is packed with UPX. The Mswinsck.ocx file must be on the computer for the worm to run.

Protection

• Initial Rapid Release version October 1, 2003
• Latest Rapid Release version July 19, 2008 revision 019
• Initial Daily Certified version October 1, 2003
• Latest Daily Certified version January 20, 2009 revision 048
• Initial Weekly Certified release date October 2, 2003

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Easy

Damage

• Damage Level: Low

Distribution

• Distribution Level: Low