W32.Petch.B

The W32.Petch.B Trojan horse is a variant of W32.Petch that spreads by downloading an infected file through IRC. It deletes critical files, disables recovery settings, and changes the Internet Explorer start page.

The Trojan is written in Delphi and is packed with UPX.

Protection

• Initial Rapid Release version November 3, 2003
• Latest Rapid Release version March 3, 2008 revision 035
• Initial Daily Certified version November 3, 2003
• Latest Daily Certified version March 3, 2008 revision 037
• Initial Weekly Certified release date November 5, 2003

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Difficult

Damage

• Damage Level: High

Distribution

• Distribution Level: Low