W32.Kifer.B

Risk Level 1: Very Low

Printer Friendly Page|Rate this page

Discovered:: February 16, 2004
Updated:: February 13, 2007 12:17:30 PM
Type:: Trojan Horse
Systems Affected:: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP

W32.Kifer.B is a Trojan Horse that uses Visual Basic (VB) scripts to attempt to mail itself to the addresses it finds in the Windows® Address Book. It also spreads through file-sharing programs, such as Kazaa®, BearShare®, and LimeWire®.

The email will have the following characteristics:
Subject: Symantec Security Alert
Message Body:
Recently the worm W32.Superman@MM was found it has reportedly spread to over seven million systems in 24 hours. Luckily Symantec leading brand in security software have a cure for this fast spreading deadly worm(SEE ATTACHMENT). Please share this software with other users as this worm is expected to hit around 80% of users online in the next seven days. More information at WWW.SYMANTEC.COM
Attachment: Symantec_Support.exe

Antivirus Protection Dates

Initial Rapid Release version February 16, 2004
Latest Rapid Release version September 28, 2010 revision 054
Initial Daily Certified version February 16, 2004
Latest Daily Certified version September 28, 2010 revision 036
Initial Weekly Certified release date February 16, 2004

Click for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

Wild Level: Low
Number of Infections: 0 - 49
Number of Sites: 0 - 2
Geographical Distribution: Low
Threat Containment: Easy
Removal: Easy

Damage

Damage Level: Low

Distribution

Distribution Level: Low

Writeup By: John Canavan

Technical Details

Search Threats

Search by name

Example: W32.Beagle.AG@mm

Internet Security Threat Report, Volume 16