1. Symantec/
  2. Security Response/
  3. W32.Forlorn@mm


August 5, 2002
February 13, 2007 11:39:56 AM
Systems Affected:

W32.Forlorn@mm is a mass-mailing worm. It uses Microsoft Outlook or its own SMTP engine to send itself to email addresses that it finds in the Microsoft Outlook Address Book or Windows Address Book. The email message arrives with the following characteristics:

From: Support@symantec.com
Subject: Free Virus Removal Tool from Symantec
Attachment:Free Virus Removal Tool From Norton.exe

The worm is written in Borland Delphi Programming Language and compressed with UPX.

Antivirus Protection Dates

  • Initial Rapid Release version August 5, 2002
  • Latest Rapid Release version August 8, 2016 revision 023
  • Initial Daily Certified version August 5, 2002
  • Latest Daily Certified version August 9, 2016 revision 001
  • Initial Weekly Certified release date August 7, 2002
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Yana Liu

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
2016 Internet Security Threat Report, Volume 21
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube