Discovered: April 17, 2008
Updated: December 12, 2008 4:23:10 AM
Also Known As: Worm:W32/AutoRun.DMO [F-Secure]
Type: Worm
Infection Length: 548,864 bytes
Systems Affected: Windows 98, Windows 95, Windows XP, Windows Me, Windows Vista, Windows NT, Windows Server 2003, Windows 2000
W32.Dutan.A is a worm that spreads by copying itself to all available network and removable drives.
Protection
-
Initial Rapid Release version April 17, 2008 revision 003
-
Latest Rapid Release version April 17, 2008 revision 003
-
Initial Daily Certified version April 17, 2008 revision 006
-
Latest Daily Certified version April 17, 2008 revision 006
-
Initial Weekly Certified release date April 23, 2008
Click for a more detailed description of Rapid Release and Daily Certified virus definitions.
Threat Assessment
Wild
-
Wild Level: Low
-
Number of Infections: 0 - 49
-
Number of Sites: 0 - 2
-
Geographical Distribution: Low
-
Threat Containment: Easy
-
Removal: Easy
Damage
-
Damage Level: Low
-
Modifies Files: Prepends 2 kilobytes (KB) of random bytes to all .xls files on the compromised computer.
Distribution
-
Distribution Level: Low
-
Shared Drives: Copies itself to all available network drives.
Writeup By: John Canavan
Technorati
Digg
Delicious
Reddit
StumbleUpon
Yahoo Buzz
Twitter
Facebook
Newsvine
