W32.Leave.B.Worm

This worm downloads components from Web sites and contains code to accept commands from IRC. The only differences between this threat and W32.Leave.Worm are the Web sites from which the components are downloaded, and that this threat is crafted to appear as a security bulletin from Microsoft.

Protection

• Initial Rapid Release version July 9, 2001
• Latest Rapid Release version July 9, 2001
• Initial Daily Certified version July 9, 2001
• Latest Daily Certified version January 15, 2008 revision 017
• Initial Weekly Certified release date pending

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Easy

Damage

• Damage Level: Low

Distribution

• Distribution Level: Low