W32.Gobot.A

W32.Gobot.A is a worm that spreads through IRC, open network shares, and file-sharing networks. The worm also propagates through any backdoors installed by the Mydoom family of worms.

The worm is written in Borland Delphi programming language and may be compressed with UPX.

Protection

• Initial Rapid Release version May 7, 2004
• Latest Rapid Release version January 26, 2010 revision 052
• Initial Daily Certified version May 7, 2004
• Latest Daily Certified version January 27, 2010 revision 005
• Initial Weekly Certified release date May 12, 2004

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Moderate

Damage

• Damage Level: Medium

Distribution

• Distribution Level: Medium