-
Discovered:
- May 21, 2009
-
Updated:
- May 21, 2009 4:25:58 PM
-
Type:
- Worm
-
Infection Length:
- 151,552 bytes
-
Systems Affected:
- Windows 2000, Windows NT, Windows Server 2003, Windows Vista, Windows XP
W32.Korron.B is a worm that replaces some file types with a copy of itself. It also copies itself to all accessible drives on the compromised computer.
Antivirus Protection Dates
-
Initial Rapid Release version May 21, 2009 revision 019
-
Latest Rapid Release version September 28, 2010 revision 054
-
Initial Daily Certified version May 21, 2009 revision 023
-
Latest Daily Certified version September 28, 2010 revision 036
-
Initial Weekly Certified release date May 27, 2009
Click for a more detailed description of Rapid Release and Daily Certified virus definitions.
Threat Assessment
Wild
-
Wild Level: Low
-
Number of Infections: 0 - 49
-
Number of Sites: 0 - 2
-
Geographical Distribution: Low
-
Threat Containment: Easy
-
Removal: Easy
Damage
-
Damage Level: Medium
-
Payload: Replaces some file types with a copy of itself.
-
Compromises Security Settings: Ends certain processes and lowers security settings.
Distribution
-
Distribution Level: Low
-
Shared Drives: Spreads through all drives on the compromised computer.
Writeup By: Andrea Lelli
