W32.Waxpow.Worm


Aliases: Email-Worm.Win32.Vimover, I-Worm/Vimover.A, W32/EmailWorm.NWE, W32/Vimover.A., Win32.Vimover.A@mm
Variants: Win32:Vimover, Worm.Mail.Vimover, Worm/Vimover.A, Worm:Win32/Vimover.A@mm

Classification: Malware
Category: Computer Worm

Status: Active & Spreading
Spreading: Slow
Geographical info: Asia, North and South America, and some parts of Europe and Australia
Removal: Easy
Platform: W32
Discovered: 02 Sep 2003
Damage: Low

Characteristics: The W32.Waxpow.Worm program is a worm that spreads via file network shares. This worm has Denial of Service attack capabilities as well. The threat is written in Visual Basic and it affects all windows platform such as Windows 95, Windows 2000, Windows 98, Windows NT, Windows Me, and Windows XP.

More details about W32.Waxpow.Worm

W32.Waxpow.Worm program is a worm that spreads via file network shares. This worm has Denial of Service attack capabilities as well. The threat is written in Visual Basic and it affects all windows platform such as Windows 95, Windows 2000, Windows 98, Windows NT, Windows Me, and Windows XP. Once W32.Waxpow.Worm is executed in your system, it duplicates itself as .exe file, adds value to registry keys, attempt to drop the Win1.bat that is utilized for a DoS attack, attempts to connect into an IRC server, and attempts to send e-mail to specific e-mail addresses that contains this message “Hi Everyone, Hey There is a new virus going out, get this antivirus program to remove the so big f virus”. It is recommended to remove this virus using a reputable antivirus software. If not removed immediately, remote attackers can steal all personal data and can cause more damage to your system depending by the commands made from the remote attackers.

The W32.Waxpow.Worm application terminates the running processes of security applications that are installed on a computer. This is to avoid being detected and deleted from the user’s computer. It may also disable the whole system itself. This results in sudden shutdowns and restarts of the affected computer. Another activity done by this W32.Waxpow.Worm application on the affected computer is the propagation of threats to other systems. This happens when the infected computer is connected to other systems through a single network. Propagation may also be done through popular instant messaging applications.