W32.Spybot.WOE

W32.Spybot.WOE is a worm with back door capabilities that can be used to launch a distributed denial of service attack. The worm spreads by exploiting numerous vulnerabilities, including the Microsoft Windows Plug and Play Buffer Overflow Vulnerability (as described in Microsoft Security Bulletin MS05-039).

Protection

• Initial Rapid Release version September 6, 2005
• Latest Rapid Release version May 30, 2007 revision 025
• Initial Daily Certified version September 6, 2005 revision 036
• Latest Daily Certified version May 30, 2007 revision 036
• Initial Weekly Certified release date September 7, 2005

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Moderate

Damage

• Damage Level: Medium

Distribution

• Distribution Level: Medium