W32.Alnuh

Risk Level 1: Very Low

Printer Friendly Page

Discovered: May 31, 2007

Updated: June 1, 2007 4:08:41 AM

Also Known As: W32/VB-DVR [Sophos], W32/Hooon.worm [McAfee], W32/VB-DVT [Sophos]

Type: Worm

Infection Length: 40,960 bytes

Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP

W32.Alnuh is a worm that copies itself to removable drives and closes Registry Editor, Task Manager, Command Prompt and Folder Options of Windows Explorer running on English and Arabic Windows.

Protection

Initial Rapid Release version May 31, 2007 revision 064
Latest Rapid Release version June 28, 2008 revision 022
Initial Daily Certified version June 1, 2007 revision 002
Latest Daily Certified version January 20, 2009 revision 048
Initial Weekly Certified release date June 6, 2007

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

Wild Level: Low
Number of Infections: 0 - 49
Number of Sites: 0 - 2
Geographical Distribution: Low
Threat Containment: Easy
Removal: Easy

Damage

Damage Level: Medium
Payload: Lowers security settings on the compromised computer.
Compromises Security Settings: Closes Registry Editor, Task Manager, Command Prompt and Folder Options of Windows Explorer.

Distribution

Distribution Level: Medium

Writeup By: Masaki Suenaga

Technical Details

Search Threats

Search by name

_{Example: W32.Beagle.AG@mm}