Discovered on: September 04, 2002
Last Updated on: September 05, 2002 08:22:36 PM
W32.Gismor@mm is a worm that uses its own SMTP engine to send itself to email addresses that it finds in your mailbox. The subject of the email message is "Phenomenal," and the attached file is "MP3Player.exe."
Also Known As: W32.Gismor.Worm
Infection Length: 8192 bytes
Systems Affected: Windows 95, Windows 98, Windows NT, Windows 2000, Windows XP, Windows Mehttp://securityresponse.symantec.com/avcen....firstname.lastname@example.org
What malware aps do you have on your computer?
What op system are you using?
Here are some that may help you remove the worm and help keep your system protected in the future:Freeware AntiSpyware and Security ProgramsSoftware firewalls with freeware versions
Zone Alarm: http://www.zonealarm.com/
Sygate: http://www.sygate.com/Antivirus programs - freeware
(you can only use one resident anti-virus program on your computer. More than one will conflict)
Avast Anti-virus freewarehttp://www.komando.com/bestshareware.aspAnti-malware freeware
(You can run as many of these as you wish. Generally there is no conflict between these, and you should always run several)
Microsoft Antispyware Beta: http://www.microsoft.com/athome/security/s...re/default.mspx
Spybot S&D: http://www.safer-networking.org/en/index.html
Microsoft Malicious Software Removal Tool (Win XP and Win 2000):http://www.microsoft.com/security/malwareremove/default.mspx
CWShredder from InterMute
CW Shredder removes some variants of spyware known as the Coolwebsearch Trojan. The Trojan takes advantage of a flaw in a key component of Windows -- Microsoft's version of the Java Virtual Machine -- to install itself via popups often found on porn and illegal software (a.k.a. "warez") sites. Run CWShredder after installing, and have it look for updates. Then click the "Fix" button, and the program will both scan and fix any problems it finds. If your system does not have this kind of spyware, it will give you the good news.
Cost: Freehttp://www.intermute.com/spysubtract/cwshr...r_download.htmlHijack This
and a variety of other tools for malware and pestwarehttp://184.108.40.206/~merijn/files/HijackThis.exe
orhttp://www.spywareinfo.com/~merijn/downloads.htmlWeb based online Antivirus and anti-malware scans:
(these can be run regardless of whatever else you are using. You must use Internet Explorer to run these.)
Panda Activescan (IE only)http://www.pandasoftware.com/activescan/co...n_principal.htm
Trend Micro antivirus and malware scan:http://housecall-beta.trendmicro.com/en/st...orp.asp?id=scan
Etrust Anti-virus web scannerhttp://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Kaspersky Anti-Virus Web Scannerhttp://www.kaspersky.com/service?chapter=161739400#betatest