W32.Holcas.A@mm

W32.Holcas.A@mm is a mass-mailing worm that uses MAPI commands to send itself to all addresses found in the Windows Address Book. It also attempts to send itself via IRC.

The email has the following characteristics:

Subject: hola como estas, ;o)
Attachment: Que_entretenido.exe

Protection

• Initial Rapid Release version February 28, 2005
• Latest Rapid Release version July 12, 2008 revision 018
• Initial Daily Certified version February 28, 2005
• Latest Daily Certified version July 12, 2008 revision 019
• Initial Weekly Certified release date March 2, 2005

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Moderate

Damage

• Damage Level: Low

Distribution

• Distribution Level: High