W32.Netspree.Worm

W32.Netspree.Worm is a worm that spreads over the network shares that are protected with trivial passwords.

W32.Netspree.Worm also uses IRC to notify the remote attackers when it infects a new system. This action may allow a hacker to download programs to the infected computer. The worm may also enable the hacker to use the infected computer as a drone for attacks against other internet-connected computers.

W32.Netspree.Worm does not spread from Windows 95/98/Me systems, although it functions normally in every other way on those platforms.

Protection

• Initial Rapid Release version January 23, 2003
• Latest Rapid Release version July 27, 2009 revision 085
• Initial Daily Certified version January 23, 2003
• Latest Daily Certified version July 27, 2009 revision 073
• Initial Weekly Certified release date January 29, 2003

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Easy

Damage

• Damage Level: Low

Distribution

• Distribution Level: Low