1. Symantec/
  2. Security Response/
  3. W32.Gibe.B@mm


Risk Level 2: Low

February 24, 2003
February 13, 2007 11:43:33 AM
Also Known As:
WORM_GIBE.B [Trend], W32/Gibe.b@mm [McAfee], W32/Gibe-D [Sophos], I-Worm.Gibe.b [KAV], Win32.Gibe.B [CA]
Systems Affected:
CVE References:

W32.Gibe.B@mm is a variant of W32.Gibe@mm. This mass-mailing worm uses Microsoft Outlook and its own SMTP engine to send itself to all the contacts in the Microsoft Outlook Address Book and the Windows Address Book. The email is disguised as a Microsoft Security Update and it arrives with an attachment that has a .exe or .zip file extension.

W32.Gibe.B@mm copies itself as WebLoader.exe to the startup folder of all the mapped remote drives. This worm also attempts to spread through the KaZaA file-sharing network and Internet Relay Chat (IRC). W32.Gibe.B@mm may send itself to some news groups whose URLs are carried by the worm.

This threat is written in the Microsoft Visual Basic programming language.

NOTE: Virus definitions dated on February 25, 2003 may detect this threat as W32.Gibe@mm.

Antivirus Protection Dates

  • Initial Rapid Release version February 25, 2003
  • Latest Rapid Release version September 28, 2010 revision 054
  • Initial Daily Certified version February 25, 2003
  • Latest Daily Certified version September 28, 2010 revision 036
  • Initial Weekly Certified release date February 26, 2003
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Yana Liu

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
2016 Internet Security Threat Report, Volume 21
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube