W32.Zindos.A

W32.Zindos.A is a worm that performs a Denial of Service (DoS) attack against the domain, microsoft.com. The worm spreads through the backdoor that Backdoor.Zincite.A opens on TCP port 1034.

Due to bugs in the code, when a system that is infected with Backdoor.Zincite.A becomes infected with W32.Zindos.A, an infinite infection loop is entered, with each infection of W32.Zindos.A re-infecting the system. This may cause the system to become slow and unresponsive.

Note: Backdoor.Zincite.A is a backdoor Trojan horse that W32.Mydoom.M@mm drops.

Protection

• Initial Rapid Release version July 27, 2004
• Latest Rapid Release version August 20, 2008 revision 017
• Initial Daily Certified version July 27, 2004
• Latest Daily Certified version August 20, 2008 revision 016
• Initial Weekly Certified release date July 28, 2004

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 3 - 9
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Moderate

Damage

• Damage Level: Medium

Distribution

• Distribution Level: Medium