Worm.Win32.Feebs.gen

tag:Internet Worms

0 0

Worm.Win32.Feebs.gen is the detection for a number of variants in this family of Internet worms. Worms from the Feebs family spread as an attachment to infected messages and also via file-sharing networks.

Worms from the Feebs family are capable of terminating firewall and antivirus programs.

This "gen" detection will detect a JavaScript component which spreads as an attachment to infected messages. This component downloads an executable copy of the worm from designated servers, saves it to the victim machine, and launches it for execution.

The JavaScript component will also cause a fake Internet page to be displayed, which informs the user that there is no connection available.

If it detects them on the victim machine, the JavaScript component will also delete the following records from the system registry:

[HKLM\System\CurrentControlSet\Services]
"FirePM" 
"KmxFile" 
"pcipim" 
"pcIPPsC" 
"RapDrv"

previous:Worm.Win32.Feebs.h
previous:Worm.Win32.Fleming

Virus Source from:

New articles

Net-Worm.Win32.Kido.irThe kido worm family creates files autorun.inf and RECYCLED{SID<....>}RANDOM_NAME.vmx on removable drives (sometimes on public network shares) Net-Worm...MS10-061MS10-061 is not categorized as virus, worm, Trojan or backdoor. It is a critical vulnerability in the Windows Print Spooler service on Wind...MS10-062MS10-062 is not categorized as virus, worm, Trojan or backdoor. It is a critical vulnerability in MPEG-4 codec on Windows 2008/vISTA/2003/XP computers, wh...MS10-063MS10-063 is not categorized as virus, worm, Trojan or backdoor. It is a critical vulnerability in the Unicode Script Processor on Windows 2...Autorun.AOLAdditionally, it has backdoor characteristics, as it attempts to connect to an IRC channel in order to receive instructions from its creator, such as downloadin...

Hot Articles

Worm.Win32.Feebs.gen

Computer Virus Clounds