Malware type: Worm

Aliases: Email-Worm.Win32.Deltad (Kaspersky), W32/DeltaD@MM (McAfee), W32.Deltad.A@mm (Symantec), Worm/Deltad (Avira), W32/Deltad-A (Sophos),

In the wild: No

Destructive: No

Language: English

Platform: Windows

Encrypted: No

Description: 
This mass-mailing worm modifies the Internet Explorer homepage, causing the browser to point to the Windows update site everytime it is opened. It also drops a Visual Basic Script file, which Trend Micro detects as VBS_DELTAD.A.

This VBScript malware propagates this worm as an attachment in email with the following details:

Subject: SAP UPDATE
Message body:
     All:
       Please update your system.
     DGSAP
Attachment: WWW.DGSAP.DELTADG.COM.EXE

For additional information about this threat, see:
Solution
Technical Details

Description created: Sep. 19, 2002 4:32:12 PM GMT -0800
Description updated: Sep. 20, 2002 9:11:32 PM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.