W32.Randex.G is a network-aware worm that will copy itself as the following files:


The worm will receive instructions from an IRC channel on a specific IRC server. One such command will trigger the aforementioned spreading.

Also Known As: W32/Randex.worm.c [McAfee], Backdoor.SdBot.gen [KAV]
Variants: W32.Randex.A, W32.Randex.B, W32.Randex.C, W32.Randex.D, W32.Randex.E, W32.Randex.F
Type: Worm
Infection Length: 60,416 bytes
Systems Affected: Windows 2000, Windows NT, Windows XP
Systems Not Affected: Linux, Macintosh, OS/2, UNIX



Number of infections: 0 - 49
Number of sites: 0 - 2
Geographical distribution: Low
Threat containment: Easy
Removal: Easy
For complete details visit: