• W32.Cervivec.A aka Cervivec.A: a mass-mailing worm that is written in Delphi. The worm is packed with UPX packer. When executed, the worm attempts to find email addresses belonging to contacts in the ICQ contact list, and then to send email to them.
  Attachement name: WORMS.ZIP
  Check out the Latest Worms page.

F-Secure
McAfee
Symantec
Trend Micro

• W32.MyLife.B aka W32.Caric: Family of W32.MyLife. A mass-mailing worm that uses Microsoft Outlook to spread to all addresses in the Outlook address book. Copies itself to C:\Windows \System\Cari.scr and may delete files, depending on the system time.
  Check out the Latest Worms page.

F-Secure
McAfee
Symantec
Trend Micro

• W32.Atram aka W32.Porkis - W32.Storiel: yet another mass-mailing worm. Contains its own SMTP engine. Uses the system default SMTP server for spreading itself to addresses found in the Windows Address Book.
  Attachment name: PORKIS.EXE, PIPPO.EXE or BAR.EXE
  Check out the Latest Worms page.

F-Secure
McAfee
Symantec
Trend Micro

• W32.FBound.C aka W32.Impo.gen - W32.Dotjaypee: a mass-mailing worm with no payload. Only action is to send itself to all addresses found in Windows Address Book. Uses the SMTP engine of the infected system. Random chosen Japanese subject when address ends with '.jp'.
  Attachment name: patch.exe
  Check out the Latest Worms page.

F-Secure
McAfee
Symantec
Trend Micro

• W32.Gibe aka W32.Gibe.A: a worm that uses Microsoft Outlook and its own SMTP engine to spread. Arrives in an email message disguised as a Microsoft Internet Security Update. It also attempts to copy itself to all locally mapped remote drives.
  Attachment name: Q216309.exe
  Check out the Latest Worms page.

F-Secure
McAfee
Symantec
Trend Micro

• W32.MyLife aka MyLife.A: a simple mass-mailer that sends itself to all contacts in the Microsoft Outlook address book. A compiled Visual Basic executable that has been compressed.
  Check out the Latest Worms page.

F-Secure
McAfee
Sophos
Symantec
Trend Micro

• W32.Klez.e aka Klez.e: a mass-mailing email worm that attempts to copy itself to network shares. It's using random subject lines, message bodies, and attachment file names. Payload is that there are files overwritten and hidden copies of the worm are created.
  Check out the Latest Worms page.

F-Secure
McAfee
Symantec
Trend Micro