Sophos

W32/Wurmark-A

Aliases
  • Email-Worm.Win32.Wurmark.a
  • W32/Mugly.b@MM
Category
Type
What to do
Prevalence low high

Summary

 
How it spreads
  • Email attachments
Affected operating systems Windows
Characteristics
  • Drops more malware
Protection available since 1 December 2004 09:08:53 (GMT)
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

W32/Wurmark-A is a Visual Basic mass-mailing worm.

When run the worm first displays a JPEG graphic using the default viewer and then creates ansmtp.dll, attached.zip, bszip.dll, uglym.jpg, winit.exe and xxz.tmp in the Windows system folder. W32/Wurmark-A is a Visual Basic mass-mailing worm.

When run the worm first displays a JPEG graphic using the default viewer and then creates ansmtp.dll, attached.zip, bszip.dll, uglym.jpg, winit.exe and xxz.tmp in the Windows system folder.

ANSMTP.DLL is a commercial Mailer Engine registered by the worm.
BSZIP.DLL is a commercial ZIP engine and can be safely deleted.
XXZ.TMP is a copy of the worm
UGLYM.JPG is an image file and can be safely deleted.
WINIT.EXE is detected by Sophos as W32/Rbot-QV.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer