W32.Erkez.C@mm

W32.Erkez.C@mm is a mass-mailing worm that sends itself to email addresses it finds on the infected computer. It also copies itself to folders that are likely to be shared on file-sharing networks.

When this worm infects a computer, it attempts to overwrite .exe files. The files that it targets are usually executables that belong to security products, including Symantec products. However, in some cases, the worm may overwrite .exe files that belong to other programs.

If the worm does overwrite .exe files, some programs or operating system functions may no longer function correctly.

Protection

• Initial Rapid Release version October 28, 2004
• Latest Rapid Release version October 28, 2004
• Initial Daily Certified version October 28, 2004
• Latest Daily Certified version October 28, 2004
• Initial Weekly Certified release date October 29, 2004

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Moderate

Damage

• Damage Level: Medium

Distribution

• Distribution Level: High