W32.Gobot.A

W32.Gobot.A is a worm that spreads through IRC, open network shares, and file-sharing networks. The worm also propagates through any backdoors installed by the Mydoom family of worms.

The worm is written in Borland Delphi programming language and may be compressed with UPX.

Protection

• Initial Rapid Release version May 7, 2004
• Latest Rapid Release version November 5, 2009 revision 032
• Initial Daily Certified version May 7, 2004
• Latest Daily Certified version November 5, 2009 revision 040
• Initial Weekly Certified release date May 12, 2004

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Moderate

Damage

• Damage Level: Medium

Distribution

• Distribution Level: Medium