Virus

W32.Werle

W32.Werle is an extremely risky computer virus that will look for executable files. If found, the virus infects them by appending own code. Virus infection may cause the system to slow down and damage various system files. Severe infection may also lead to system crashes or Blue Screen of Death (BSOD) during Windows boot-up. More

W32.Ackantta.H@mm

W32.Ackantta.H@mm is a computer worm that will propagate by utilizing the infected computer to mass-mail itself. W32.Ackantta.H@mm will gather contact details including email address from the compromised computer where the same threat will be sent unknown to users. Ending and deleting services related to security and antivirus application is another payload of this virus. More

W32/Ramnit.a

W32/Ramnit.a is a virus that is self-replicating. It usually propagates via unsecured network connection and removable USB drives including flash drive, writable CD and external hard disk drives. W32/Ramnit.a also spreads by infecting file on the system that is shared on a network environment. More

W32/VBMania@MM

W32/VBMania@MM is a virus that will arrive as an email attachment to a message with subject “”Here you have”. W32/VBMania@MM will look for process belonging to security applications and terminates them immediately. This virus also deletes various files on the compromised computer. More

W32.Sality!dr

W32.Sality!dr is a detection for a virus that will infect executable files and have similar functions to a member of W32.Sality family. W32.Sality!dr will also search removable and networks shared drives for executable files. It will modify the file to redirect running of the polymorphic viral code that was found to be inserted on the last section of the host file. More

W32.Rixobot!gen3

W32.Rixobot!gen3 is a generic detection for a computer Trojan or Virus that were found associated with W32.Rixobot family. Files detected as W32.Rixobot!gen3 are deemed malicious and poses great danger on network environment. More

W32.Stuxnet!lnk

W32.Stuxnet!lnk is a detection for .lnk files created by the W32.Stuxnet worm. These .lnk files will exploits the “Microsoft Windows Shortcut ‘LNK’ Files Automatic File Execution Vulnerability”  to be able to execute the files created by the worm. Malicious files will be spread by copying itself on removable drives found on infected computer. More

W32.Phiskap.A

W32.Phiskap.A is a deadly virus that will infect various files like .doc, .docx and rtf. If executed, W32.Phiskap.A will search all local drives, removable drives and USB drives for these files and compress them with an .exe format. The modified files will contain malicious code and be moved to %Current Folder%\[original file name].exe. More

W32.Temphid!lnk

W32.Temphid!lnk is a detection for maliciously created .lnk files by W32.Temphid. W32.Temphid!lnk is usually found on removable USB drives of the infected computer. This link file will exploit operating system’s weak spot or also known as Microsoft Windows Shortcut ‘LNK’ Files Automatic File Execution Vulnerability to spread itself. More

Suspicious.Pythia

Suspicious.Pythia is a generic detection method developed to identify entirely new computer security threats without using the conventional antivirus signature. Suspicious.Pythia detection is aimed at discovering malicious programs that were intentionally encrypted by the author to hide its malicious purpose. More