- June 27, 2003
- February 13, 2007 12:03:00 PM
Also Known As:
- W32/Slanper.worm [McAfee], W32/Slanper-A [Sophos], Worm.Win32.Randex.d [KAV]
W32.Randex.D is a network-aware worm that will copy itself to the following paths on computers with weak administrator passwords:
The worm will also drop a Backdoor Trojan detected as Backdoor.Roxy
, which will listen on the following TCP ports:
- The virus definitions dated prior to July 31, 2003 detect the dropped file as Backdoor.Trojan.
- The detection for W32.Randex.D was updated in virus definitions dated August 6, 2003 to account for the discovery of a minor variant. This file exhibited the same characteristics as previous samples.
Antivirus Protection Dates
Initial Rapid Release version June 28, 2003
Latest Rapid Release version November 18, 2016 revision 032
Initial Daily Certified version June 28, 2003
Latest Daily Certified version November 19, 2016 revision 003
Initial Weekly Certified release date June 28, 2003
Click for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Douglas Knowles