1. Symantec/
  2. Security Response/
  3. W32.Wintoo.Worm


Risk Level 2: Low

October 15, 2003
February 13, 2007 12:12:12 PM
Systems Affected:

W32.Wintoo.Worm is a mass-mailing worm that sends itself to all the recipients in the Windows Address Book. It sends itself using the MAPI interface. The email will have the following characteristics:
  • Subject: <Cyrilic text that loosely translates to "Look at this">
  • Attachment: win2drv.exe

The worm also modifies the Windows background to a bitmap containing a message in Cyrilic.

Antivirus Protection Dates

  • Initial Rapid Release version October 16, 2003
  • Latest Rapid Release version August 8, 2016 revision 023
  • Initial Daily Certified version October 16, 2003
  • Latest Daily Certified version August 9, 2016 revision 001
  • Initial Weekly Certified release date October 22, 2003
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Douglas Knowles

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
2016 Internet Security Threat Report, Volume 21
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube