-
Discovered:
- July 10, 2004
-
Updated:
- February 13, 2007 12:18:01 PM
-
Type:
- Worm
-
Systems Affected:
- Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP
W32.Hardoc@mm is a mass-mailing worm that sends itself to email addresses found in .html files and the Windows address book on the infected computer. This worm uses the Incorrect MIME Header vulnerability (described in
Microsoft Security Bulletin MS01-020) to allow the automatic execution of the attachment on an unpatched computer.
The email has the following characteristics:
Subject: (One of the following)
Body: !!! Power Point !!!
Attachment: PowerPoint.scr
Antivirus Protection Dates
-
Initial Rapid Release version July 11, 2004
-
Latest Rapid Release version September 28, 2010 revision 054
-
Initial Daily Certified version July 11, 2004
-
Latest Daily Certified version September 28, 2010 revision 036
-
Initial Weekly Certified release date July 14, 2004
Click for a more detailed description of Rapid Release and Daily Certified virus definitions.
Threat Assessment
Wild
-
Wild Level: Low
-
Number of Infections: 0 - 49
-
Number of Sites: 0 - 2
-
Geographical Distribution: Low
-
Threat Containment: Easy
-
Removal: Easy
Writeup By: Heather Shannon
