Aliases: N/A
Variants: N/A

Classification: Malware
Category: Computer Worm

Status: Active & Spreading
Spreading: Slow
Geographical info: Asia, North and South America, and some parts of Europe and Australia
Removal: Hard
Platform: W32
Discovered: 03 Sep 2002

Characteristics: The W32.Temir.Worm application is an uncomplicated worm that tries to send an uncontaminated text file to every contact in the recent default email address book.

More details about W32.Temir.Worm

When the W32.Temir.Worm was executed, it is similar to some viruses. These worm utilizes the recent default program of the email to send it to C:WindowsSystem.ini to all of the contacts in the recent default address book of the email. The message of the email contains a Subject of ‘The most beautiful eyes of the world !!!’, a Message of ‘HI :   I attach a picture with the girl i met . Just tell me your opinion’, and has an attachment of System.ini. In case there was no :WindowsSystem.ini existing, the worm still sends it without any attachment at all.

In order to remove this worm, it is necessary to have the virus definitions updated. Then run a complete system scan then delete all of the files that are being detected as the W32.Temir.Worm. It is recommended to have up-to-date patch levels at all times especially on the computers that are hosting public services and are easily reached through firewalls for instance are the FTP, HTTP, DNS services, and mail. You have to configure the server of your email in order to eliminate or block the email containing attachments of files that are typically used to propagate threats for instance are the files having extension of .exe, .vbs, .pif, .scr, and .bat files. Firewall id important so it is accessible to use it in order to block all the incoming connections coming from the internet to the services that are available publicly.