SpywareGuide powered by Actiance Security Labs
Search SpywareGuide Database & Site
Home Access the Guide
List of Products List of Companies List of Categories
Tools
X-RayPC
Terms and Definitions
 
Full Name:
Sixem.A Websearch   Read More
Type: Worm
Also Known as: W32.Sixem.A@mm (Symantec), W32/Sixem-A (Sophos), Win32.HLLM.Soccer (DrWeb)
SG Index: 8 [Explain]
Removal tools: List of products that detect/remove/protect against Sixem.A:
  • IM, P2P control, malware prevention and web filtering in single appliance: Unified Security Gateway
  • Category Description: Virus-like program that spreads automatically to other computers by sending itself out by email or by any other means. A program that propagates itself by attacking other machines and copying itself to the affected machine.

    Worms have self-replicating code that travels from machine to machine by various means. A worms first objective is merely propagation. Worms can be destructive depending on what payload they have been given. Worms may replace files, but do not insert themselves into files.
    Comment: Sixem.A is a mass-mailing worm that spreads across other computer by sending itself as an e-mail attachment.
    This worm uses the e-mail addresses harvested from the infected computer.

    E-mails sent has the following characteristics:

    From address may be any of the following:

    newsworld@cnn.com
    newsreader@hotmail.com
    kellyjast@hotmail.com

    Note: These are fake addresses.

    Subject may have any of the following:

    Mad soccer fanats
    World Cup game set
    Please reply me Jerry

    Message Body may have any of the following:

    Nudists are organising their own tribute to the world cup, by staging
    their own nude soccer game, though it is not clear how the teams will
    tell each other apart. Good photos ;)

    Crazy soccer fanats killed two teens, watch what they make on photos.
    Please report on this all who know.

    Halo Markus, i sent my nude pics. Please reply me with you nude photos
    ;). Best regard You Sweet Kitty


    Attachment may have any of the following:

    nudist_soccer.bmp.exe
    soccer_image.jpg.exe
    kelly_naked_imgs.jpg.exe

    This worm also sends the gathered e-mail addresses to its author.

    This worm downloads another file from a remote site and executes it. This file lowers the security settings by ending security related process and modifying registry entries.

    Disables Task Manager.

    Changes Windows Hosts File to block access to security related sites.
       
    Properties:
  •  Adds other software
  •  Connects to the internet
  •  Sends mail
  • Click here to leave feedback for this product

    Recent Modifications
    2012-5-10  NetSpy
    2012-5-1  Unclassified Adware/Spyware
    2012-4-11  Adult Networks/Services
    2012-4-11  CoolWebSearch
    2012-3-13  Misc. Exploits
    2012-2-24  Zango Times
    2012-2-24  About Blank
    2012-1-30  HostSeeker Toolbar
    2012-1-13  2000Cracks
    2012-1-13  7AdPower Dialer
     
    Company  | Site and Spyware FAQ
    © Copyright 2003-2011, Actiance, Inc. All rights reserved.   Privacy Policy