Overview: W32.Areses.P@mm is a mass-mailing worm that sends emails in Russian, opens a back door, and may download remote files.

Category: Worm

Risk Level: Low

Symptoms:

  • Email message with From: Spoofed
  • Email message with Subject: Russian Characters

Related Files and Process:

  • %System%\msr2ca.dll
  • %Temp%\Message.hta

View User’s Removal Procedure Below

View Complete Information and Removal : Click Here

Source: Symantec