- Discovered:
- August 5, 2003
- Updated:
- February 13, 2007 12:12:18 PM
- Also Known As:
- W32/Bebars.worm [McAfee], I-Worm.Lafon.b [Kaspersky]
- Type:
- Worm
- Systems Affected:
- Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP
W32.Bebar.B@mm is a mass-mailing worm that spreads using Outlook. It collects email addresses from html files and sends itself to each address it finds. The email will have one of the following forms:
Subject: Wallpaper Shakira
Attachment: ShakiraWallpaper.jpg .exe
Subject: Imagenes de Shakira!
Attachment: ShakiraPics.jpg .exe
Subject: Shakira y su nuevo estilo
Attachment: ImagenShakira.jpg .exe
This worm also infects images by prepending itself to .jpg and .gif files.
This threat is written in Visual Basic.
Note: Virus definitions released October 17, 2003 contained a modified detection to account for the discovery of a minor variant.
Antivirus Protection Dates
- Initial Rapid Release version August 6, 2003
- Latest Rapid Release version September 28, 2010 revision 054
- Initial Daily Certified version August 6, 2003
- Latest Daily Certified version September 28, 2010 revision 036
- Initial Weekly Certified release date August 6, 2003
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Threat Assessment
Wild
- Wild Level: Low
- Number of Infections: 0 - 49
- Number of Sites: 0 - 2
- Geographical Distribution: Low
- Threat Containment: Easy
- Removal: Moderate
Damage
- Damage Level: Medium
Distribution
- Distribution Level: High
Writeup By: Heather Shannon



