TrendLabs Malware Blog
Glossary
TrendWatch
TrendLabs Twitter
WORM_FBOUND.B
Overview

Malware type: Worm

Aliases: W32/Fbound.b@MM (McAfee), W32.FBound.gen@mm (Symantec), W32/FBound.B (Avira), W32/FBound-B (Sophos),

In the wild: Yes

Destructive: No

Language: English

Platform: Windows

Encrypted: No

Overall risk rating:


Description: 
This worm mass-mails itself to all email addresses listed in the infected user's Windows Address Book (WAB). It arrives in an email with a subject that it randomly selects from a group of Japanese language phrases if the email address of the recipient ends with .jp. Otherwise, the subject is “Important.” The name of the attachment it arrives with is PATCH.EXE.

The details of the email it arrives with may be as follows:

To: <recipient>
Subject: <"Important" or random Japanese text(applicable on Japanese supported platforms)>
Message Body: <blank>
Attachment: patch.exe

This worm does not have a destructive payload.

For additional information about this threat, see:
Technical Details

Description created: Mar. 3, 2002 5:47:00 PM GMT -0800
Description updated: Mar. 14, 2002 3:31:13 AM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.