W32.Benjamin.Worm

W32.Benjamin.Worm comes disguised as popular music, movie, or software files. It spreads across KaZaA file-sharing networks by tricking KaZaA users into downloading the program and opening it.

The size of the worm can vary because the worm pads copies of itself with garbage bytes.



NOTE: Definitions dated prior to May 20, 2002 may detect this as Backdoor.Trojan.

Protection

• Initial Rapid Release version May 20, 2002
• Latest Rapid Release version August 20, 2008 revision 017
• Initial Daily Certified version May 20, 2002
• Latest Daily Certified version August 20, 2008 revision 016
• Initial Weekly Certified release date May 21, 2002

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Medium
• Number of Infections: More than 1000
• Number of Sites: More than 10
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Easy

Damage

• Damage Level: Low

Distribution

• Distribution Level: Medium