BAT911.Worm

Risk Level 2: Low

Printer Friendly Page|Rate this page

Discovered:: March 31, 2000
Updated:: February 13, 2007 11:51:02 AM
Also Known As:: BAT.Chode.Worm, Chode, Foreskin, BAT911, 911 Worm, W95.Firkin, Worm.Firkin, BAT/Firkin.Worm
Type:: Worm
Systems Affected:: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP

BAT911.Worm is an Internet worm that uses .bat files. It searches through a range of Internet Protocol (IP) addresses of known Internet Service Providers (ISPs) to find an accessible computer. If an accessible computer shares its drive C and it is not password protected, then the virus copies its files to drive C of that computer.

Antivirus Protection Dates

Initial Rapid Release version April 1, 2000
Latest Rapid Release version April 1, 2000
Initial Daily Certified version October 31, 2007 revision 003
Latest Daily Certified version June 17, 2008 revision 017
Initial Weekly Certified release date April 1, 2000

Click for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

Wild Level: Low
Number of Infections: 0 - 49
Number of Sites: 0 - 2
Geographical Distribution: Low
Threat Containment: Moderate
Removal: Moderate

Damage

Damage Level: High

Distribution

Distribution Level: Medium

Writeup By: Raul Elnitiarta

Technical Details

Search Threats

Search by name

Example: W32.Beagle.AG@mm

Internet Security Threat Report, Volume 16