Symantec.com > Security Response > W32.Prolin.Worm

W32.Prolin.Worm

Risk Level 2: Low

Printer Friendly Page

Discovered: November 30, 2000
Updated: February 13, 2007 11:47:43 AM
Also Known As: TROJ_SHOCKWAVE.A, CREATIVE, TROJ_PROLIN.A
Type: Worm


W32.Prolin.Worm uses Microsoft Outlook to email a copy of itself to everyone in the Outlook address book. The worm moves all .mp3, .jpg, and .zip files to the root folder. It renames each of these files and appends the following text to the extension of each file:

change atleast now to LINUX

Protection

  • Initial Rapid Release version November 30, 2000
  • Latest Rapid Release version July 19, 2008 revision 019
  • Initial Daily Certified version November 30, 2000
  • Latest Daily Certified version July 19, 2008 revision 018
  • Initial Weekly Certified release date pending

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Medium
  • Number of Infections: 50 - 999
  • Number of Sites: More than 10
  • Geographical Distribution: Medium
  • Threat Containment: Easy
  • Removal: Moderate

Damage

  • Damage Level: Medium

Distribution

  • Distribution Level: High

Writeup By: Cary Ng
PRINT THIS PAGE
Search by name
Example: W32.Beagle.AG@mm
Norton Green PC Service
Windows Vista Security