SpywareGuide powered by Actiance Security Labs
Search SpywareGuide Database & Site
Home Access the Guide
List of Products List of Companies List of Categories
Tools
X-RayPC
Terms and Definitions
 
Full Name:
W32.Ahlem Websearch   Read More
Type: Worm
SG Index: 8 [Explain]
Removal tools: List of products that detect/remove/protect against W32.Ahlem:
  • IM, P2P control, malware prevention and web filtering in single appliance: Unified Security Gateway
  • Category Description: Virus-like program that spreads automatically to other computers by sending itself out by email or by any other means. A program that propagates itself by attacking other machines and copying itself to the affected machine.

    Worms have self-replicating code that travels from machine to machine by various means. A worms first objective is merely propagation. Worms can be destructive depending on what payload they have been given. Worms may replace files, but do not insert themselves into files.
    Comment: The worm comes in the form of an attachment. The file we tested was a.exe. When the the file was executed it attempts to email everyone in your address book the same file.

    Newer versions of this worm have the ability to steal paypal passwords. It creates a service in order to keep in contact with a server. This service is called "Windows Management Instrumenta". It will send a text file called ip.txt with the information if it exists on your computer.
       
    Properties:
  •  Alters Key Windows Components
  •  Connects to the internet
  •  Force, hidden or stealth install
  •  Installs Through Exploit
  •  No EULA present
  •  No standard Uninstaller
  •  Transmits Personal or Enterprise Information
  •  Stealth Tactics
  • Click here to leave feedback for this product

    Recent Modifications
    2012-5-10  NetSpy
    2012-5-1  Unclassified Adware/Spyware
    2012-4-11  Adult Networks/Services
    2012-4-11  CoolWebSearch
    2012-3-13  Misc. Exploits
    2012-2-24  Zango Times
    2012-2-24  About Blank
    2012-1-30  HostSeeker Toolbar
    2012-1-13  2000Cracks
    2012-1-13  7AdPower Dialer
     
    Company  | Site and Spyware FAQ
    © Copyright 2003-2011, Actiance, Inc. All rights reserved.   Privacy Policy