http://securityresponse.symantec.com/avcenter/venc/data/[email protected] Discovered on: December 4, 2001 Last Updated on: December 4, 2001 at 09:15:56 PM PST Due to the increased rate of submission and level of damage, Symantec Security Response is upgrading [email protected] from Category 3 to Category 4. [email protected] is a mass-mailing worm that is written in Visual Basic. The worm has been compressed using a known Portable Executable (PE)* file compressor. The worm can spread its infection using the ICQ network as well as by email using Microsoft Outlook. If IRC is installed, this worm can also insert mIRC scripts that will enable the computer to be used in Denial of Service (DOS) attacks. AND HERE IS THE BEST PART: Removal Tool Symantec Security Response has posted a removal tool to assist in eradicating this worm. Please go here to read the instructions and download the removal tool. http://www.symantec.com/avcenter/venc/data/[email protected] NOT to: http://pub-cu.symantec.com/avcenter/venc/data/[email protected] ml FOR a COMPLETE LIST go to: http://www.symantec.com/avcenter/tools.list.html