1. /
  2. Security Response/
  3. W32.Randex.GEL

W32.Randex.GEL

Risk Level 2: Low

Discovered:
August 18, 2006
Updated:
February 13, 2007 12:58:21 PM
Also Known As:
WORM_RANDEX.AM [Trend], W32/Sdbot.worm!MS06-040 [McAfe, W32/Kassbot-V [Sophos], W32./Vanebot-A [Sophos], W32/Rbot-FKR [Sophos]
Type:
Worm
Systems Affected:
Windows 2000, Windows 95, Windows 98, Windows Me, Windows XP


W32.Randex.GEL is a network-aware worm with back door capabilities that exploits the Microsoft Windows Server Service Remote Buffer Overflow Vulnerability (as described in Microsoft Security Bulletin MS06-040).

Antivirus Protection Dates

  • Initial Rapid Release version August 19, 2006
  • Latest Rapid Release version March 3, 2011 revision 052
  • Initial Daily Certified version August 19, 2006
  • Latest Daily Certified version March 4, 2011 revision 002
  • Initial Weekly Certified release date August 23, 2006
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 - 49
  • Number of Sites: 0 - 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Easy

Damage

  • Damage Level: Medium

Distribution

  • Distribution Level: Medium
Writeup By: Kazumasa Itabashi

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report
Symantec DeepSight Screensaver