W32.Deev@mm is a mass-mailing worm that uses Microsoft Outlook to send itself to all contacts in the Microsoft Outlook Address Book. The email message has the following characteristics:
Subject: Download MP3s fast...
Message: Download this screen saver... look for the password and we will give you 10 free MP3s. Absolutely Free!!!
This threat has two components:
What are Portable Executable (PE) files?
- The Portable Executable (PE) component which is written in the Borland Delphi Programming Language and is compressed. This is detected as W32.Deev@mm.
- The Visual Basic Script (VBS) component that is created by the PE component. This is detected as VBS.Deev@mm.
PE files are files that are portable across all Microsoft 32-bit operating systems. The same PE-format executable can be executed on any version of Windows 95, 98, Me, NT, 2000, and XP. All PE files are executable, but not all executable files are portable.
A common example of a Portable Executable file is a screen saver (.scr) file.
Click for a more detailed description of Rapid Release and Daily Certified virus definitions.