W32.Kwbot.Worm

W32.Kwbot.Worm has backdoor Trojan capability, which allows a hacker to gain control of the compromised computer. The worm can update itself by checking for newer versions over the Internet. W32.Kwbot.Worm disguises itself as popular movie, game, or software files, and it attempts to spread across KaZaA file-sharing networks by tricking KaZaA users into downloading the program and opening it.



November 6, 2002. Changed to Category 2 based on increased prevalance.

Protection

• Initial Rapid Release version June 19, 2002
• Latest Rapid Release version March 3, 2008 revision 035
• Initial Daily Certified version June 19, 2002
• Latest Daily Certified version March 3, 2008 revision 037
• Initial Weekly Certified release date June 19, 2002

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Medium
• Number of Infections: More than 1000
• Number of Sites: More than 10
• Geographical Distribution: High
• Threat Containment: Easy
• Removal: Moderate

Damage

• Damage Level: Low

Distribution

• Distribution Level: Low