Worm:Win32/Vermis.gen!lnk
Microsoft security software detects and removes this worm.
Worms automatically spread to other PCs. Typically, this threat gets installed onto your PC through other worms when you visit a compromised webpage.
This is a generic detection for malicious .INF and .LNK files dropped by different worms, such as IRCBot, Phorpiex, Dorkbot, Caphaw, etc.
Trojan:Win32/Necurs
Microsoft security software detects and removes this family of threats.
This family of malware work together to download other malware, including threats from the Win32/Sirefef and Win32/Medfos families. They can also give a malicious hacker backdoor access and control of your PC.
These threats can be installed at the same time as rogue security software, such as Rogue:Win32/Winwebsec. We have also seen them installed by variants of the Blacole family, the Win32/Beebone family, the Win32/Zbot family, and the Win32/Dorkbot family.
Worm:Win32/Pushbot.UZ
Worm:Win32/Pushbot.UZ is a worm that may spread via MSN Messenger and removable drives. The worm also contains backdoor functionality that allows unauthorized access to an affected computer. This worm does not spread automatically upon installation, but must be ordered to spread by a remote attacker.
Worm:Win32/Vobfus.JG
Worm:Win32/Dorpiex.A
Windows Defender Antivirus detects and removes this threat.
Worm:Win32/Dorpiex.A sends Facebook messages that contain a web link that downloads additional malware onto your computer. It is a worm which spreads to other computers. It does this by infecting removable drives (such as USB drives or portable hard disks) that you have plugged into your computer. If you then plug those drives into another computer, the worm will infect that computer as well.
See our infographic to the right for a depiction of how a worm spreads by removable drives.
We have observed it being dropped and run by Trojan:Win32/Alureon.GC.
TrojanDownloader:Win32/Kebster.A
Windows Defender detects and removes this threat.
This threat downloads and installs other programs onto your PC without your consent, including other malware.
This threat can be installed by an exploit when you visit a malicious or compromised website.
HackTool:Win32/Keygen
Windows Defender detects and removes this threat.
This tool generates software keys.
Malware is often installed along with this tool. Microsoft security software finds malware on more than half of the PCs where we detect this tool.
You can read more about Win32/Keygen in Volume 13 of the Security Intelligence Report.
Worm:Win32/Skypii.A
Windows Defender detects and removes this threat.
Worm:Win32/Skypii.A is a worm that spreads through Skype Instant Messenger or Windows Live Messenger by sending malicious links to all instant messenger (IM) contacts.
Worm:Win32/Wootbot.EI
Worm:Win32/Wootbot.EI is a worm that includes a backdoor component, which connects to an IRC server and awaits commands from remote attackers. For example, an attacker can send a command to distribute the worm to other computers by exploiting a vulnerability in the Windows service LSASS, described in Microsoft Security Bulletin MS04-011.
Win32/Kasidet
Microsoft security software detects and removes this family of threats.
Threats in this family can steal your sensitive information.
They can be installed on your PC by exploit kits such as JS/Neclu, spam email attachments, or infected removable drives. They can also be downloaded by other malware such as Win32/Gamarue and Win32/Dorkbot.