PE_FUBALCA.A-O, W32/Fujacks.aa, Agent.BKY, Trojan-Downloader.Win32.Agent.bky, Win32/Tonveck.A
Category: Computer Worm
Some parts of Asia, Europe, North and South America, Africa and Australia
01 Apr 2007
Windows 2000, NT, Server 2003 and XP are the systems affected by W32.Fubalca which was first found on April 1, 2007. This worm propagates via removable media and infects several file types like .exe and .html.
W32.Fubalca Removal Tool
If you have Malware on your computer it will cause annoyances and will damage your system. You should either:
A. Manually remove the infected files from your computer, or
B. Automatically scan your system using trusted software
We recommend that you scan your system for malware. Our partner has a computer worm removal tool to automatically clean W32.Fubalca from your computer.
More details about W32.Fubalca
tag with the URL [http://]macr.microfsot.com/Adm[REMOVED]. Through this URL, a copy of Trojan.Anicmoo is downloaded. This Trojan exploits Microsoft Windows Cursor and Icon ANI Format Handling Remote Buffer Overflow Vulnerability then downloads the worm body from another URL to be able to create a mutex called as “MyInfect”.
The W32.Fubalca program repairs and recreates itself to avoid detection and removal. It continuously updates its files, Dynamic Link Libraries (DLLs), processes and registry keys. An anti-malware scanner may not be able to detect the program’s complete files. The other remaining files may still continue to execute its operations when some of the components are deleted. The W32.Fubalca application uses the resources of the computer to excute its operation. This may lead to slower computer performance. The W32.Fubalca program may run on various operating systems including Windows 2000, Windows NT, and Windows XP.
Browse for more malware information