Discovered: July 8, 2002
Updated: February 13, 2007 11:39:32 AM
Also Known As: W32/Datom-A [Sophos], Win32.Datom [CA], W32/Datom.worm [McAfee], Datom [F-Prot], Worm.Win32.Datom [KAV], WORM_DATOM.A [Trend], W32/Datom [Panda], Win32/Datom.worm [RAV]
Type: Worm
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP
Due to a decreased rate of submissions, Symantec Security Response has downgraded the threat level of this worm from Category 3 to Category 2 as of May 5, 2003.
W32.Datom.Worm is a worm that spreads through open shares. This worm does not contain a damaging payload.
If you are on a network, or have a full time connection to the Internet, Symantec recommends that you disable or password protect file sharing. Because this worm, like many others, spreads by using shared folders on networked computers, to ensure that the worm does not reinfect the computer after it has been removed, Symantec suggests sharing with read-only access or using password protection. For instructions on how to do this, consult your Windows documentation or the document
How to configure shared Windows folders for maximum network protection.
Protection
-
Initial Rapid Release version July 8, 2002
-
Latest Rapid Release version July 19, 2008 revision 019
-
Initial Daily Certified version July 8, 2002
-
Latest Daily Certified version July 19, 2008 revision 018
-
Initial Weekly Certified release date July 8, 2002
Click for a more detailed description of Rapid Release and Daily Certified virus definitions.
Threat Assessment
Wild
-
Wild Level: Low
-
Number of Infections: More than 1000
-
Number of Sites: More than 10
-
Geographical Distribution: Medium
-
Threat Containment: Easy
-
Removal: Moderate
Damage
Distribution
Writeup By: Peter Ferrie