1. Symantec/
  2. Security Response/
  3. W32.Nolor@mm


Risk Level 2: Low

April 28, 2003
February 13, 2007 12:00:37 PM
Also Known As:
W32/Lovelorn@MM [McAfee], WORM_LOVELORN.A [Trend], Win32.Lovelorn.A [CA], I-Worm.Lovelorn [KAV], W32/Cailont-A [Sophos]
Worm, Virus
Systems Affected:

W32.Nolor@mm is a mass-mailing worm that uses its own SMTP engine to spread itself. The email will have a variable subject line and an attachment with the filename, *.Kiss.ok.exe or *.htm.

W32.Nolor@mm is also a file infector that encrypts the host file, and then prepends itself to the host file.

This threat is written in the Borland C++ programming language.

Antivirus Protection Dates

  • Initial Rapid Release version April 28, 2003
  • Latest Rapid Release version March 23, 2017 revision 037
  • Initial Daily Certified version April 28, 2003
  • Latest Daily Certified version March 23, 2017 revision 041
  • Initial Weekly Certified release date April 30, 2003
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Kaoru Hayashi

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
2016 Internet Security Threat Report, Volume 21
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube