W32.Ixas@mm is a mass-mailing worm that uses its own SMTP engine to send itself to all the contacts in Windows Address Book.
The email has the following characteristics:
From: <random letters>@delfi.lt
The subject can be one of the following,
- Gift for you
- Urgent NEWs
- EBAY Update
- Antivirus Update
- Urgent Windows UPDATE
- Hi, look this attcahment
- Hello, please wisit this nice site
Attachment has a random file name with a .exe file extension.
The worm also sends itself to the email addresses it finds from the incoming emails. The email it creates for this set of email addresses has the following characteristics:
Attachment has a random file name.
I reply as soon as possible to your email
Several variants of this threat have been found. All the variants are written in the Microsoft C++ programming language. ASPack packs some of the variants.
Click for a more detailed description of Rapid Release and Daily Certified virus definitions.