Summary

Summary
Action
More Information
| How it spreads |
|
|---|---|
| Affected operating systems | Windows |
| Characteristics |
|
| Protection available since | 1 December 2004 09:08:53 (GMT) |
| Detected by | All Sophos products |
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action

Summary
Action
More Information
Please follow the instructions for removing worms.
More Information
W32/Wurmark-A is a Visual Basic mass-mailing worm.
When run the worm first displays a JPEG graphic using the default viewer and then creates ansmtp.dll, attached.zip, bszip.dll, uglym.jpg, winit.exe and xxz.tmp in the Windows system folder. W32/Wurmark-A is a Visual Basic mass-mailing worm.
When run the worm first displays a JPEG graphic using the default viewer and then creates ansmtp.dll, attached.zip, bszip.dll, uglym.jpg, winit.exe and xxz.tmp in the Windows system folder.
ANSMTP.DLL is a commercial Mailer Engine registered by the worm.
BSZIP.DLL is a commercial ZIP engine and can be safely deleted.
XXZ.TMP is a copy of the worm
UGLYM.JPG is an image file and can be safely deleted.
WINIT.EXE is detected by Sophos as W32/Rbot-QV.
