1. /
  2. Security Response/
  3. W32.Kwbot.Worm

W32.Kwbot.Worm

Risk Level 2: Low

Discovered:
June 18, 2002
Updated:
February 13, 2007 11:48:24 AM
Also Known As:
W32/Kwbot.worm [McAfee], W32/KWBot-A [Sophos], Win32.Kowbot.12 [CA], WORM_KWBOT.A [Trend], Worm.Win32.SdBot [AVP]
Type:
Worm
Systems Affected:
Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP

W32.Kwbot.Worm has backdoor Trojan capability, which allows a hacker to gain control of the compromised computer. The worm can update itself by checking for newer versions over the Internet. W32.Kwbot.Worm disguises itself as popular movie, game, or software files, and it attempts to spread across KaZaA file-sharing networks by tricking KaZaA users into downloading the program and opening it.



November 6, 2002. Changed to Category 2 based on increased prevalance.

Antivirus Protection Dates

  • Initial Rapid Release version June 19, 2002
  • Latest Rapid Release version September 28, 2010 revision 054
  • Initial Daily Certified version June 19, 2002
  • Latest Daily Certified version September 28, 2010 revision 036
  • Initial Weekly Certified release date June 19, 2002
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Medium
  • Number of Infections: More than 1000
  • Number of Sites: More than 10
  • Geographical Distribution: High
  • Threat Containment: Easy
  • Removal: Moderate

Damage

  • Damage Level: Low

Distribution

  • Distribution Level: Low
Writeup By: Yana Liu

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report
Symantec DeepSight Screensaver