1. Symantec/
  2. Security Response/
  3. W32.Sponge@mm


Risk Level 2: Low

October 30, 2002
February 13, 2007 11:48:06 AM
Also Known As:
W32/Sponge@MM [McAfee], WORM_SPONGE.A [Trend]
Systems Affected:

W32.Sponge@mm is a mass-mailing worm that uses Microsoft Outlook to send itself to all contacts in the Outlook Address Book. The email has the following characteristics,

Subject: SpongeBob Wallpaper
Attachment: Spongy.exe

It overwrites .scr and .pif files in all folders except the root folder. It also appends code to the end of .htm files in all folders except the root folder.

The worm contains a macro component that is used to infect Microsoft Word documents and the global template Normal.dot. This is detected as W97M.Sponge.

It is written in the Microsoft Visual Basic programming language and compressed using UPX.

Antivirus Protection Dates

  • Initial Rapid Release version October 30, 2002
  • Latest Rapid Release version March 23, 2017 revision 037
  • Initial Daily Certified version October 30, 2002
  • Latest Daily Certified version March 23, 2017 revision 041
  • Initial Weekly Certified release date October 30, 2002
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Yana Liu

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
2016 Internet Security Threat Report, Volume 21
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube