1. Symantec/
  2. Security Response/
  3. W32.Dotex.CA


Risk Level 1: Very Low

July 29, 2007
February 21, 2008 3:03:42 PM
Also Known As:
W32/Autorun.worm.e [McAfee], Win32/Mocmex.AM [Computer Associates], Packed.Win32.NSAnti.r [Kaspersky], Packed.Win32.NSAnti.r [F-Secure], WORM_AGENT.TBH [Trend], Win32/Mocmex.CI [Computer Associates]
Infection Length:
44,636 bytes
Systems Affected:
W32.Dotex.CA is a worm that copies itself to the root of all drives and downloads potentially malicious files on to the compromised computer. It also attempts to disable various antivirus programs.

This threat has been discovered on the following digital photo frames:
  • Insignia Photo Frame
  • ADS Digital Photo Frame

Note: Virus definitions dated February 20, 2008 or earlier detect this threat as Trojan Horse.

Antivirus Protection Dates

  • Initial Rapid Release version February 21, 2008 revision 001
  • Latest Rapid Release version August 28, 2008 revision 054
  • Initial Daily Certified version February 21, 2008 revision 002
  • Latest Daily Certified version August 29, 2008 revision 005
  • Initial Weekly Certified release date August 1, 2007
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Chen Yu

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
2016 Internet Security Threat Report, Volume 21
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube