Win32:Fbound-C

is a very simple worm which arrives in the form of an attachment to infected e-mails. The infected message has the following characteristics:
Subject:        Important
Body:           message body is blank
Attachment:     Patch.exe 

When the worm sends itself to an email address ending with the letters .jp (signifying the recipient is in Japan) the worm uses  one of sixteen different subject lines using Japanese characters.

The worm sends itself to everyone in the user's address book, using its own SMTP routine. It does not have any destructive payload, does not drop any files and does not change any item in registry. When sending itself, it does not follow the SMTP standards so it could be bounced or truncated by some email servers.

Any avast! with VPS file dated on or after 14th March 2002 is able to detect this worm.

Home page
Viruses  older windows viruses 2002  Win32:Fbound-C