Discovered: February 8, 2007
Updated: February 8, 2007 9:41:26 PM
Also Known As: Win32/Looked.FU [Computer Associates]
Type: Worm
Infection Length: 20,377 bytes
Systems Affected: Windows 98, Windows 95, Windows XP, Windows Me, Windows NT, Windows 2000
W32.Fujacks.AW is a worm that spreads by copying itself to network shares. The worm copies itself to the root drive of all partitions and infects all .exe files found on the local computer. It also ends some security-related processes and services.
Protection
-
Initial Rapid Release version February 8, 2007
-
Latest Rapid Release version March 25, 2008 revision 018
-
Initial Daily Certified version February 8, 2007
-
Latest Daily Certified version March 25, 2008 revision 022
-
Initial Weekly Certified release date February 14, 2007
Click for a more detailed description of Rapid Release and Daily Certified virus definitions.
Threat Assessment
Wild
-
Wild Level: Low
-
Number of Infections: 0 - 49
-
Number of Sites: 0 - 2
-
Geographical Distribution: Low
-
Threat Containment: Easy
-
Removal: Easy
Damage
-
Damage Level: Medium
-
Payload: Ends some security-related processes and services.
-
Modifies Files: Infects .exe files
Distribution
-
Distribution Level: High
-
Target of Infection: Spreads through network shares protected by weak passwords.
It also copies itself to the root drive of all partitions.
Writeup By: James O'Connor