1. Symantec/
  2. Security Response/
  3. W32.Alco.AB@mm


Risk Level 1: Very Low

March 11, 2003
February 13, 2007 11:44:10 AM
Systems Affected:

W32.Alco.AB@mm is a mass-mailing worm that sends itself to all the email addresses that it finds in the .htm and .html files. The email has the following characteristics:

From: Chief Skaler <admin@evol.com>
Subject: Evol Worm
There was an error with your smtp provider please read the datalink and send a copy to your ISP. Error1106 : Dead datalink (report is attatched).
Attachment: Errorlog.exe

The worm copies itself to the default shared folders of the KaZaA, Bearshare, and eDonkey2000 file-sharing networks. The worm also attempts to spread through IRC.

This threat is written in the Microsoft Visual Basic programming language.

Antivirus Protection Dates

  • Initial Rapid Release version March 12, 2003
  • Latest Rapid Release version September 28, 2010 revision 054
  • Initial Daily Certified version March 12, 2003
  • Latest Daily Certified version September 28, 2010 revision 036
  • Initial Weekly Certified release date March 12, 2003
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Yana Liu

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
2016 Internet Security Threat Report, Volume 21
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube