Prevx Research Division
WORM.EXE
Banking Info StealerFree PC Cleanup from Webroot
Use Webroot SecureAnywhere to remove WORM.EXE.
"Just when you thought it couldn't get any better or faster. The Webroot scanning engine is 'high octane' with a hidden nitrous oxide system. Bravo!!!" W. Lodzinski, SecureAnywhere User
Associated Malware Groups
The unsafe files using this name are associated with the malware groups:
- Banking Info Stealer
- Information Stealer
- Cloaked Malware
- Malicious Software
File Behavior
WORM.EXE has been seen to perform the following behavior:
- The Process is packed and/or encrypted using a software packing process
- The Process is polymorphic and can change its structure
- Can Send email using SMTP protocols
- This Process sends MIME Email
- This Process Contains User Mode Rootkit Functionality and can hide itself from the running process list
- Adds a Registry Key (RUN) to auto start Programs on system start up
WORM.EXE has been the subject of the following behavior:
- Created as a process on disk
- Deleted as a process from disk
- Added as a Registry auto start to load Program on Boot up
Country Of Origin
The filename WORM.EXE was first seen on Jul 24 2007 in the following geographical regions of the Webroot community:
- Canada on Jul 24 2007
- Spain on Dec 6 2007
- Brazil on Aug 5 2008
- The United States on Sep 27 2008
- Australia on Mar 18 2010
- Egypt on May 5 2012
File Name Aliases
WORM.EXE can also use the following file names:
- SAMPLE_SET 006 (nnn).EXE
- DROPISKILLER[1].EXE
- WORM[1].EXE
- SVCHOST.EXE
- WINDOWS_7FULL.SCR
- MYPORNPICS.SCR
- NTLDR.EXE
- RKMDDC.EXE
- WORKGROUP
- 20835099.DAT
- 00057605.EXE
- 38493443.DAT
- 59117289.DAT
- 53109488.EXE
- 09926978.EXE
- 97344573.EXE
- 99280693.EXE
Filesizes
The following file size has been seen:
- 31,037 bytes
- 1,110,528 bytes
- 7,720 bytes
- 65,038 bytes
- 747,008 bytes
- 47,648 bytes
- 254,562 bytes
- 24,064 bytes
- 40,960 bytes
File Type
The filename WORM.EXE refers to many versions of an executable program.
Help the Webroot Community to fight cyber crime
We are always looking for ways to improve the quality and speed of research to help us protect you from malicious software and cyber crime.
PCMag.com Editors' Choice Award Logo is a trademark of Ziff Davis Publishing Holdings Inc. Used under license.