W32.Gnuman.Worm

W32.Gnuman.Worm is a worm that spreads using the Gnutella network. The worm can change its own file name to match any query. However, the file size is always 8192 bytes, and it always has the extension .exe.

W32.Gnuman.Worm appears to have been written by Mandragore, a member of the virus writing group 29A.


As of February 27, 2001, SARC has only received one infection report.

Protection

• Initial Rapid Release version February 27, 2001
• Latest Rapid Release version July 19, 2008 revision 019
• Initial Daily Certified version February 27, 2001
• Latest Daily Certified version January 20, 2009 revision 048
• Initial Weekly Certified release date pending

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Easy

Damage

• Damage Level: Low

Distribution

• Distribution Level: Medium