W32.Wozer.Worm

W32.Wozer.Worm is a worm that spreads through network shares and IRC. It also attempts to spread through email by sending itself as an attached .zip file, which, however, is corrupt and will not spread the worm.

W32.Wozer.Worm is written in Borland Delphi and is packed with UPX.

Protection

• Initial Rapid Release version November 19, 2003
• Latest Rapid Release version July 27, 2009 revision 085
• Initial Daily Certified version November 19, 2003
• Latest Daily Certified version July 27, 2009 revision 073
• Initial Weekly Certified release date November 19, 2003

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Moderate

Damage

• Damage Level: Low

Distribution

• Distribution Level: Medium