W32.Ackantta.F@mm

W32.Ackantta.F@mm is a mass-mailing worm that spreads through removable drives and sends an email that contains an attachment of itself. It may also download potentially malicious files from the Internet.

Protection

• Initial Rapid Release version June 29, 2009 revision 068
• Latest Rapid Release version July 6, 2009 revision 065
• Initial Daily Certified version June 30, 2009 revision 002
• Latest Daily Certified version July 7, 2009 revision 003
• Initial Weekly Certified release date July 1, 2009

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Easy

Damage

• Damage Level: High
• Payload: Downloads potentially malicious files from the Internet.
• Large Scale E-mailing: Sends out emails with a copy of itself as an attachment.
• Compromises Security Settings: Attempts to bypass the Windows Firewall.

Distribution

• Distribution Level: High
• Subject of Email: Remembering Michael Jackson
• Name of Attachment: Michael songs and pictures.zip
• Size of Attachment: Varies
• Shared Drives: Attempts to spread through removable drives.