1. Symantec/
  2. Security Response/
  3. W32.Randex.C

W32.Randex.C

Risk Level 1: Very Low

Discovered:
June 18, 2003
Updated:
February 13, 2007 12:02:44 PM
Type:
Worm
Systems Affected:
Windows

W32.Randex.C is a network-aware worm that will copy itself as the following files:
  • \Admin$\system32\msmonk32.exe
  • \c$\winnt\system32\msmonk32.exe

The worm receives instructions from an IRC channel on a specific IRC server. One such command will trigger the aforementioned spreading.
W32.Randex.C may open ports 20, 113, 445, 1024, 55808. It also opens randomly chosen ports.

Antivirus Protection Dates

  • Initial Rapid Release version June 19, 2003
  • Latest Rapid Release version September 28, 2010 revision 054
  • Initial Daily Certified version June 19, 2003
  • Latest Daily Certified version September 28, 2010 revision 036
  • Initial Weekly Certified release date June 25, 2003
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Douglas Knowles

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
2016 Internet Security Threat Report, Volume 21
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube