Aliases: N/A
Variants: N/A

Classification: Malware
Category: Computer Worm

Status: Active and
Spreading: Low
Geographical info: Asia, Europe and US
Removal: Low
Platform: W32
Discovered: 18 Apr 2007
Damage: Low

Characteristics: The W32.Dosmouse worm can infect Windows Operating System such as Windows 2000, Windows 95, Windows 98, windows ME, Windows NT, Windows Server 2003 and Windows XP. This is a worm that duplicates itself to the core or roots of all drives of a computer unit.

More details about W32.Dosmouse

Based on some observations, the W32.Dosmouse worm affects network shares and removable media. This worm usually duplicates and saves itself on the drives like some of the following: dosmouse.exe, system.exe, autoexec. exe, more.exe, and hay.exe. Entries in the subkey registry were also created by the Dosmouse. Afterwards, the worm then alters some entries in the registry. The worms then add this message at the end of the windows Explorer Title bar ^-^ Hi, how are you? ^_^ . This program can also add other malware programs into the system. It downloads the files from the remote server. These may be adware, spyware or Trojan applications. These are installed in the system and added to the system registry. They are then executed to run in the background.

A computer infected by the W32.Dosmouse worm may display pop-up and pop-under advertisements continuously. The visited websites and search queries may be recorded and sent to another person. These are used to send advertisements more specific to the user’s preferences. The added malicious software may use the system to spread to other computers via network shares.