Symantec.com > Security Response > W32.Coflop@mm

W32.Coflop@mm

Printer Friendly Page

Discovered: January 6, 2003
Updated: February 13, 2007 11:49:34 AM
Also Known As: Win32.Coflop.A [Computer Assoc, W32/Coflop@MM [McAfee], W32/Coflop-A [Sophos], WORM_COFLOP.A [Trend Micro]
Type: Worm
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP


W32.Coflop@mm is a mass-mailing worm that uses MAPI to send itself to all the contacts in the Microsoft Outlook Address Book. The worm also attempts to spread itself through the KaZaA file-sharing networks and the floppy disk. The email has the following characteristics:

Subject: Back Up your Data to Floppy Today!
Message:
This program will allow you to back up 3 Times as much data to your floppy
disk! Up to 9MB!!! (compared to 2mb disks) so back up your system today with this free software.
Attachment: Sol.exe

This threat is written in the Microsoft Visual Basic programming language.

Protection

  • Initial Rapid Release version January 7, 2003
  • Latest Rapid Release version July 19, 2008 revision 019
  • Initial Daily Certified version January 7, 2003
  • Latest Daily Certified version December 8, 2008 revision 050
  • Initial Weekly Certified release date January 8, 2003

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Writeup By: Yana Liu
Search by name
Example: W32.Beagle.AG@mm
Norton Internet Security / Norton AntiVirus 2009
Windows Vista Security