-
Discovered:
- April 28, 2008
-
Updated:
- April 29, 2008 4:04:23 PM
-
Also Known As:
- Troj/Agent-GXN [Sophos], Troj/Dwnldr-IMK [Sophos], Troj/Koceg-B [Sophos]
-
Type:
- Worm
-
Systems Affected:
- Windows 2000, Windows Server 2003, Windows Vista, Windows XP
W32.Mandaph is a worm that spreads through mapped and fixed drives and may download additional malware on to the compromised computer.
Note: Virus definitions dated April 28, 2008 or earlier detect this threat as
Trojan.Dropper or
Backdoor.Trojan.
Antivirus Protection Dates
-
Initial Rapid Release version April 28, 2008 revision 020
-
Latest Rapid Release version April 23, 2013 revision 006
-
Initial Daily Certified version April 29, 2008 revision 003
-
Latest Daily Certified version April 23, 2013 revision 009
-
Initial Weekly Certified release date April 30, 2008
Click for a more detailed description of Rapid Release and Daily Certified virus definitions.
Threat Assessment
Wild
-
Wild Level: Low
-
Number of Infections: 0 - 49
-
Number of Sites: 0 - 2
-
Geographical Distribution: Low
-
Threat Containment: Easy
-
Removal: Easy
Damage
-
Damage Level: Medium
-
Payload: May open a back door on the compromised computer.
May download more malware on to the compromised computer.
Distribution
-
Distribution Level: Low
-
Target of Infection: Spreads through removable drives.
Writeup By: Elia Florio
