W32.Netspree.Worm


Aliases: W32.Netspree.Worm, W32/Netspree.bat, W32/Netspree.dll, WORM_NETSPREE.A
Variants: N/A

Classification: Malware
Category: Computer Worm

Status: Dormant
Spreading: Slow
Geographical info: Europe, North and South America, and some parts of Asia and Australia
Removal: Easy
Platform: W32
Discovered: 22 Jan 2003
Damage: Low

Characteristics: W32.Netspree.Worm is a worm that propagates through network shares protected by trivial passwords. All platforms of Windows Operating System can be affected by this virus. It does not spread from Windows 95/98/Me systems, although it works on the average in every other way on those Operating Systems. It also uses Internet Relay chat site to communicate with remote attackers when it infects a new system.

More details about W32.Netspree.Worm

This remote ability of this worm allows it to steal private or confidential files or data from the compromised computer. It can also be destructive, having the ability to also download malware on a compromised computer so that it can further damage your computer’s system. This action may allow a hacker to download programs and make use of the compromised computer as a drone for attacks against other Internet-connected computers. This worm is also characterized as a dropper which means that it also carries several infected files that may contaminate the computer. These files are Lcp_Netbios.dll, Psexec.bat, Psexec.exe and Win32load.exe.

It has also been claimed that the program can disable or render inoperative programs that had been previously installed by the user in the infected computer. It also facilitates the downloading of files without the knowledge and consent of the user. Just like any other malware programs, this application is usually installed without the consent of the user and by exploiting vulnerabilities in the user’s security settings. It operates on systems that run under the Windows NT; Windows XP; and Windows 2000.