1. Symantec/
  2. Security Response/
  3. W32.Liamed@mm


Risk Level 1: Very Low

July 24, 2003
February 13, 2007 12:04:12 PM
Systems Affected:

W32.Liamed@mm is a mass-mailing worm that:
  • Uses its own SMTP engine to send itself to all the contacts in Microsoft Windows Address Book
  • Has backdoor functionality that can download files from the Internet and email stolen information to the author of the worm.

    The subject line and the message body of the email use Chinese characters, and the attachment is titled "hello.exe."

    The worm is written in the Microsoft C++ programming language and is compressed with UPX.

Antivirus Protection Dates

  • Initial Rapid Release version July 25, 2003
  • Latest Rapid Release version July 25, 2003
  • Initial Daily Certified version July 25, 2003
  • Latest Daily Certified version July 25, 2003
  • Initial Weekly Certified release date July 30, 2003
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Yana Liu

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
2016 Internet Security Threat Report, Volume 21
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube