Quick Links: SpywareGuide Greynets Blog | SpywareGuide Product Database | SpywareGuide Company Database | SpywareGuide Categories
Search SpywareGuide Database & Site
Security Email Alerts & Updates
SpywareGuide powered by FaceTime Security Labs
Full Name:
w32.Kmeth Worm Websearch   Read More
Type: Worm
Also Known as: Kmeth Worm, Meth Worm
SG Index: 7 [Explain]
Removal tools: List of products that detect/remove/protect against w32.Kmeth Worm:
  • Control IM and P2P use, block spyware and other malware: RTGuardian
  • Endpoint Spyware Remediation: Greynet Enterprise Manager
  • IM, P2P control, malware prevention and web filtering in single appliance: Unified Security Gateway
  • Category Description: Virus-like program that spreads automatically to other computers by sending itself out by email or by any other means. A program that propagates itself by attacking other machines and copying itself to the affected machine.

    Worms have self-replicating code that travels from machine to machine by various means. A worms first objective is merely propagation. Worms can be destructive depending on what payload they have been given. Worms may replace files, but do not insert themselves into files.
    Comment: This worm downloads and installs itself through javascript code exploiting IE. It will install 2 files to the infected PCs Temp directory and run them. It can then distribute itself through Yahoo's Instant Messenging program whether the user knows it or not. It manipulates the status message in Yahoo's IM which leads to an infection link.

    Newer versions of this worm can disable vital Windows diagnostic tools such as Task Manager and the Registry Editor.
    Screenshots:
    w32.Kmeth Worm Infection messages sent by infected Yahoo IM user.
    w32.Kmeth Worm The site that hijacks the IE homepage when the infection is run.
       
    Properties:
  •  Autostarts/Stays Resident
  •  Connects to the internet
  •  Force, hidden or stealth install
  •  Installs Through Exploit
  •  No EULA present
  •  No standard Uninstaller
  •  Stealth Tactics
  • Click here to leave feedback for this product

    Help with the BUST!
    Click here and give us what details you have and let our international research team take it from there. If you desire your report will remain anonymous.
    Recent Blog Posts
  • The Facebook (Dis)Honesty Box
  • Fake Kaskersky Keygen Leads To Infections
  • Someone Doesn't Like Me...
  • Service With A Swipe - When Support Gets Phished
  • Phishing For Dummies
  • Hacking: Now A Porn Marketing Tool
  • Vkontakte Targeted By SMS Scammers
  • Google Wave "Invite Generator" Programs - Avoid!
  • Hello, Is It Jihad You're Looking For?
  • PS3 Owners Targeted By "Virus Free" Scam
  • Recent Modifications
    2009-11-6  OnlineRegistryScan.org
    2009-11-6  PaintBrush
    2009-11-6  Pic Hunter
    2009-11-4  Gumblar
    2009-11-4  Adware.Verticity
    2009-11-4  AntiArp
    2009-11-4  AntiVirGear
    2009-11-4  Armitage
    2009-11-4  AutoBot
    2009-11-4  AutoCon
     

    Site EULA | Site Map | Contact Us | About Us | Site and Spyware FAQ | Advertise | RSS Feeds  | Link To Us | SpywareGuide Japan Japanese

    © Copyright 2007, FaceTime Communications, Inc. All rights reserved.