Quick Links: SpywareGuide Greynets Blog | SpywareGuide Product Database | SpywareGuide Company Database | SpywareGuide Categories
Search SpywareGuide Database & Site
Security Email Alerts & Updates
SpywareGuide powered by FaceTime Security Labs
Full Name:
W32.Heartworm.a Websearch   Read More
Type: Worm
Also Known as: VirtualCard, heart worm
SG Index: 7 [Explain]
Removal tools: List of products that detect/remove/protect against W32.Heartworm.a:
  • Control IM and P2P use, block spyware and other malware: RTGuardian
  • Endpoint Spyware Remediation: Greynet Enterprise Manager
  • IM, P2P control, malware prevention and web filtering in single appliance: Unified Security Gateway
  • Category Description: Virus-like program that spreads automatically to other computers by sending itself out by email or by any other means. A program that propagates itself by attacking other machines and copying itself to the affected machine.

    Worms have self-replicating code that travels from machine to machine by various means. A worms first objective is merely propagation. Worms can be destructive depending on what payload they have been given. Worms may replace files, but do not insert themselves into files.
    Comment: The infection spreads by running a file in circulation on Russian webhosting sites claiming to have a "virtual card" waiting for them - when the file is run, a picture of a heart containing a poem is launched, and the infected user will pass the infection link to their contacts on MSN Messenger with the phrase "olha o que eu fiz pra vc....curti ai...[url removed]"

    Immediately after installation, it downloads a file from a Russian domain. Then it opens up a .gif. Then it makes a call back to the before mentioned domain and downloads another file.

    It also sends information about your computer to the distributor's e-mail address through an SMTP connection. This includes internal network information such as devices on the network.
       
    Properties:
  •  Allows remote connect
  •  Autostarts/Stays Resident
  •  Connects to the internet
  •  No EULA present
  •  No standard Uninstaller
  •  Transmits Personal or Enterprise Information
  •  Reveals internal network
  •  Stealth Tactics
  • Click here to leave feedback for this product

    Help with the BUST!
    Click here and give us what details you have and let our international research team take it from there. If you desire your report will remain anonymous.
    Recent Blog Posts
  • Hackers Target Neopets Users
  • Pay Per Click Autoclickers
  • Malware Pushers Jump On #Neda Twitter Tag
  • Iran: A Few DDoS Websites
  • Pushing The Self Destruct Button
  • Evolution Of A Moneymaking Tactic
  • iPhone Twitter Messages Lead To Male Enhancement Spam
  • "Obama has just been killed" - 100% Incorrect
  • The Valve Verification Center
  • Adding Insult To Injury
  • Recent Modifications
    2009-7-4  PaintBrush
    2009-7-4  Pic Hunter
    2009-7-4  17lele
    2009-7-4  1st contact
    2009-7-4  2-Seek
    2009-7-4  2000Cracks
    2009-7-4  20x2p
    2009-7-4  2M Free Tetris
    2009-7-4  2Search
    2009-7-4  3D Falling Icons
     

    Site EULA | Site Map | Contact Us | About Us | Site and Spyware FAQ | Advertise | RSS Feeds  | Link To Us | SpywareGuide Japan Japanese

    © Copyright 2007, FaceTime Communications, Inc. All rights reserved.