W32/Apost.A@mm

Download VIRUSfighter NOW
W32/Apost.A@mm Destructivity: Spreading: Overall risk:
  
• Detected by virus detection files published: 9/3/2001 • Type: Worm
• Virus characteristics first published: 9/3/2001 • Spreading mechanism: Email
• Virus characteristics latest update: 12/17/2003 • Overall risk: Low
• Infection type: Microsoft Windows 95/98/98 SE/ME/NT 4/2000/XP/2003/Vista  

Virus type Spreading
mechanism
Destructivity
and payload
Additional
descriptions
Detection
and removal
Email characteristics:
  • Subject: As per your request!
  • Body: Please find attached file for your review.
    I look forward to hear from you again very soon. Thank you.
  • Attachment: README.EXE
When executed, it will copy itself to the Windows directory and to the root directory of local drives. It then proceeds to use Microsoft Outlook to email itself to all addresses in the infected user's address book. The sent emails will not be visible in Outlook's sent view.

The worm may display the following message boxes:

Apost 1


Apost 2


Below is an example of how an infected mail may look:

Apost 3

# - A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z
To protect and serve, VirusFighter