W32.Fakerecy

Vreau sa zic ca mi-am batut capul mai bine de juma’ de ora… cu:

W32.Fakerecy

Risk Level 1: Very Low

Discovered: January 18, 2007
Updated: January 19, 2007 8:29:28 AM
Type: Worm
Infection Length: Varies
Systems Affected: Windows 98, Windows 95, Windows XP, Windows Me, Windows NT, Windows 2000

Once executed, the worm creates the following files:

  • [DRIVE]:\autorun.inf
  • [DRIVE]:\Recycled\desktop.ini
  • [DRIVE]:\Recycled\INFO2
  • [DRIVE]:\Recycled\Recycled\ctfmon.exe
  • %UserProfile%\Start Menu\Programs\Startup\desktop.ini
  • %UserProfile%\Start Menu\Programs\Startup\ctfmon.exe

The worm then spreads by copying itself with the hidden and system attributes set to a fake Recycled folder, which it creates, and to mapped drives.


Disable System Restore (Windows Me/XP).
Update the virus definitions.
Run a full system scan.

Solutia oferita de Symantec. Si totusi solutia a venit de la TrendMicro.

2 comentarii

  1. florin   •  

    :)>- mersi fratioare
    chiar aveam nevoie sa aflu cum se numeste panarama asta de vierme.inca odata mersi

  2. Octav   •     Author

    ma bucur ca ti-a fost de ajutor. :)

Lasă un răspuns