XBlock By Actiance - Home
Someone Spying on You? Fight Back!
Currently Notice: Undefined variable: incprefix in /data/www/xblock/product_show.php on line 123 25,860,543 Spy Software Busted!
Full Name:
Type: Worm
Danger Level: 6
Category Description: Virus-like program that spreads automatically to other computers by sending itself out by email or by any other means. A program that propagates itself by attacking other machines and copying itself to the affected machine.

Worms have self-replicating code that travels from machine to machine by various means. A worms first objective is merely propagation. Worms can be destructive depending on what payload they have been given. Worms may replace files, but do not insert themselves into files.
Comment: The characteristics of this malware are similar to that of a Trojan worm.

The parent file is a ".pif" file, which in turn leads to two other binaries with random name. These two files are hidden. These two files have Autostarters.
One of these files is of same size as parent ".pif" file.
One Interesting feature of this malware is, it kills task manager process.
It phone homes to some blacklisted Sites apart from downloading another ".pif" file.
This malware on it's own goes through all AOL buddy list and sends the infection URl , incase buddy is online other wise it mails the same content to offline buddies.

Back to the list of products removed by X-Cleaner

© Copyright 2003-2011, Actiance, Inc. All rights reserved.   Privacy Policy