1. /
  2. Security Response/
  3. W32.Rusty@m

W32.Rusty@m

Risk Level 1: Very Low

Discovered:
February 15, 2004
Updated:
February 13, 2007 12:17:29 PM
Type:
Worm
Systems Affected:
Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP

W32.Rusty@m is an email worm that uses MAPI to spread through Microsoft Outlook. It also copies itself to various instant messenger and file-sharing program folders.

The email message has the following characteristics:

Subject: (One of the following):
  • <empty>
  • Mail Delivery System
  • Check this out!
  • Important information for you. Read it immediately!

Attachment: (One of the following):
  • <empty>
  • AvPc AntiAv.exe
  • doc.exe
  • Body,.Html.exe

W32.Rusty@m is written in Visual Basic.

Antivirus Protection Dates

  • Initial Rapid Release version February 16, 2004
  • Latest Rapid Release version September 28, 2010 revision 054
  • Initial Daily Certified version February 16, 2004
  • Latest Daily Certified version September 28, 2010 revision 036
  • Initial Weekly Certified release date February 16, 2004
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 - 49
  • Number of Sites: 0 - 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Easy

Damage

  • Damage Level: Low

Distribution

  • Distribution Level: Low
Writeup By: Yuhui Huang

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report, Volume 17
Symantec DeepSight Screensaver