Quick Links: SpywareGuide Greynets Blog | SpywareGuide Product Database | SpywareGuide Company Database | SpywareGuide Categories
Search SpywareGuide Database & Site
Security Email Alerts & Updates
SpywareGuide powered by FaceTime Security Labs
Full Name:
W32.Heartworm.a Websearch   Read More
Type: Worm
Also Known as: VirtualCard, heart worm
SG Index: 7 [Explain]
Removal tools: List of products that detect/remove/protect against W32.Heartworm.a:
  • Control IM and P2P use, block spyware and other malware: RTGuardian
  • Endpoint Spyware Remediation: Greynet Enterprise Manager
  • IM, P2P control, malware prevention and web filtering in single appliance: Unified Security Gateway
  • Category Description: Virus-like program that spreads automatically to other computers by sending itself out by email or by any other means. A program that propagates itself by attacking other machines and copying itself to the affected machine.

    Worms have self-replicating code that travels from machine to machine by various means. A worms first objective is merely propagation. Worms can be destructive depending on what payload they have been given. Worms may replace files, but do not insert themselves into files.
    Comment: The infection spreads by running a file in circulation on Russian webhosting sites claiming to have a "virtual card" waiting for them - when the file is run, a picture of a heart containing a poem is launched, and the infected user will pass the infection link to their contacts on MSN Messenger with the phrase "olha o que eu fiz pra vc....curti ai...[url removed]"

    Immediately after installation, it downloads a file from a Russian domain. Then it opens up a .gif. Then it makes a call back to the before mentioned domain and downloads another file.

    It also sends information about your computer to the distributor's e-mail address through an SMTP connection. This includes internal network information such as devices on the network.
       
    Properties:
  •  Allows remote connect
  •  Autostarts/Stays Resident
  •  Connects to the internet
  •  No EULA present
  •  No standard Uninstaller
  •  Transmits Personal or Enterprise Information
  •  Reveals internal network
  •  Stealth Tactics
  • Click here to leave feedback for this product

    Help with the BUST!
    Click here and give us what details you have and let our international research team take it from there. If you desire your report will remain anonymous.
    Recent Blog Posts
  • The Facebook (Dis)Honesty Box
  • Fake Kaskersky Keygen Leads To Infections
  • Someone Doesn't Like Me...
  • Service With A Swipe - When Support Gets Phished
  • Phishing For Dummies
  • Hacking: Now A Porn Marketing Tool
  • Vkontakte Targeted By SMS Scammers
  • Google Wave "Invite Generator" Programs - Avoid!
  • Hello, Is It Jihad You're Looking For?
  • PS3 Owners Targeted By "Virus Free" Scam
  • Recent Modifications
    2009-11-6  OnlineRegistryScan.org
    2009-11-6  PaintBrush
    2009-11-6  Pic Hunter
    2009-11-4  Gumblar
    2009-11-4  Adware.Verticity
    2009-11-4  AntiArp
    2009-11-4  AntiVirGear
    2009-11-4  Armitage
    2009-11-4  AutoBot
    2009-11-4  AutoCon
     

    Site EULA | Site Map | Contact Us | About Us | Site and Spyware FAQ | Advertise | RSS Feeds  | Link To Us | SpywareGuide Japan Japanese

    © Copyright 2007, FaceTime Communications, Inc. All rights reserved.