Internet threat level: 1
Threat level 1
The Internet threat alert status is currently normal. At present, no major epidemics or other serious incidents have been recorded by Kaspersky Lab’s monitoring service.
Threat level 2
The Internet threat alert status is currently raised. At present, a malicious mass mailing or malware sample with previously unknown functionality has been detected.
Threat level 3
The Internet threat alert status is currently high. At present, there is a significant rise in reports of malware that exploits a critical vulnerability in the Windows operating system.
Threat level 4
The Internet threat alert status is currently critical. At present, malware levels are extremely high. Internet usage may be severely disrupted as the epidemic spreads.
Email-Worm.Win32.Zhelatin.o
02.03.07 20:39 GMT
Status : moderate risk
Kaspersky Lab has detected a mass mailing of Email-Worm.Win32.Zhelatin.o, which is spreading as an attachment to infected emails.
Zhelatin.o is very similiar to the first Zhelatin variant - Zhelatin.a.
The Kaspersky anti-virus databases have been updated and users are recommended to update as soon as possible.
Possible subjects in infected emails:
- I Always Knew
- I Am Lost In You
- I Believe
- I Can't Function
- I Dream of you
- I Give to You
- I Love Thee
- I Love You Mower
- I Love You So
- I Love You Soo Much
- I Love You with All I Am
- I Still Love You
- I Think of You
- I Win with You
- I Woof You
Possible names for attachments containing the body of the worm:
- Postcard.exe
- flash postcard.exe
- greeting card.exe
- greeting postcard.exe
Possible texts in the emails:
- You + Me
- You Are My Guiding Star
- You Asked Me Why
- You Brighten My Day
- You Lucky Duck!
- You Rock Me!
- You Were Worth the Wait
- You and I
- You and I Forever
- You are out of this world
- You're My Hero
- You're Soo kissable
- You're so Far Away
- You're the One
- Your Love Has Opened
- Your Silly Smile
- flash postcard.exe
- greeting card.exe
- greeting postcard.exe
A detailed description of Email-Worm.Win32.Zhelatin.o is now available in the Kaspersky Virus Encyclopaedia.
© 1997-2010 Kaspersky Lab ZAO. All Rights Reserved.
Industry-leading Antivirus Software.
Registered trademarks and service marks are the property of their respective owners.