W32/Bare.A is a P2P worm. This worm infects Windows systems. It spreads using KaZaA, Bearshare, Morpheus and eDonkey2000, which are file-sharing software.

The W32/Bare.A worm camouflages itself under different names, deceiving the user who downloads it into the shared folder of the file sharing programs.

Upon execution of the infected file, the worm copies itself to the shared folder located under Program Files. The name of the shared folder depends on the file sharing software installed, and can be any one of the following:

Program Files\Kazaa\My Shared Folder
Program Files\Edonkey2000\Incoming
Program Files\Morpheus\My Shared Folder
Program Files\Bearshare\Shared

The names of the infected files created by W32/Bare.A worm are randomly generated from words contained in a list of its own.

The first extension of the infected file name can be any one of these;
.asf, .asx, .mpe, .cpl, .mp3, .mpg, .gif, .jpg, .avi, or .zip, and the second extension is .exe.

The worm spreads by copying itself to the shared folders of the file sharing programs, KaZaA, Bearshare, Morpheus and eDonkey2000.

This worm first appeared on 25th August 2002.

Other names of W32/Bare.A worm:

This worm is also known as Worm.P2P.Bare.A and W32.HLLW.Bare.