Aliases: N/A
Variants: N/A

Classification: Malware
Category: Computer Worm

Status: Active & Spreading
Spreading: Slow
Geographical info: Asia, North and South America, and some parts of Europe and Australia
Removal: Easy
Platform: W32
Discovered: 15 Jan 2004
Damage: Low

Characteristics: The W32.Stuplo application is an uncomplicated Basic Visual worm that propagates by replicating itself to the root of every local hard drive. The systems that are affected include 95, Windows 2000, Windows Me, Windows 98, Windows Server 2003, Windows NT, and Windows XP.

More details about W32.Stuplo

Once the W32.Stuplo was being established, the worm replicates itself to the very root of each of the local hard drives such as the .exe. Additional information, the worm replicates itself as the %Startup%Test having .exe extension so that the virus will run, at the same time, every time the Windows starts. The %Startup% variable refers to the folder of the Windows Startup. This show a discrepancy together with the installation and the operating system for instance is the UsersStart MenuProgramsStartup SettingsAll and C:Documents. This worm is spreading by simply replicating itself to the local hard drives of the computer.

The computers infected with the W32.Stuplo program may potentially have a gradual and progressive decline of the system's performance over time. Infected machines are said to have pop-ups showing up when browsing using the Web browsing application Internet Explorer. It is suspected that the virus is integrated into the browser application upon installation. Users have reported seeing pop-ups with different promotions and items being advertised on the Web, and clicking them would redirect them to a certain website not intentionally visited by the user.