W32.Bebar.B@mm

Risk Level 2: Low

Discovered:
August 5, 2003
Updated:
February 13, 2007 12:12:18 PM
Also Known As:
W32/Bebars.worm [McAfee], I-Worm.Lafon.b [Kaspersky]
Type:
Worm
Systems Affected:
Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP

W32.Bebar.B@mm is a mass-mailing worm that spreads using Outlook. It collects email addresses from html files and sends itself to each address it finds. The email will have one of the following forms:

Subject: Wallpaper Shakira
Attachment: ShakiraWallpaper.jpg .exe

Subject: Imagenes de Shakira!
Attachment: ShakiraPics.jpg .exe

Subject: Shakira y su nuevo estilo
Attachment: ImagenShakira.jpg .exe

This worm also infects images by prepending itself to .jpg and .gif files.

This threat is written in Visual Basic.

Note: Virus definitions released October 17, 2003 contained a modified detection to account for the discovery of a minor variant.

Antivirus Protection Dates

  • Initial Rapid Release version August 6, 2003
  • Latest Rapid Release version September 28, 2010 revision 054
  • Initial Daily Certified version August 6, 2003
  • Latest Daily Certified version September 28, 2010 revision 036
  • Initial Weekly Certified release date August 6, 2003
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 - 49
  • Number of Sites: 0 - 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Moderate

Damage

  • Damage Level: Medium

Distribution

  • Distribution Level: High
Writeup By: Heather Shannon

Search Threats

Search by name

Example: W32.Beagle.AG@mm
ThreatCon Widget
Internet Security Threat Report, Volume 16
Symantec DeepSight Screensaver