Skip to main content
Skip to main content
Microsoft Security Intelligence
110 entries found. Displaying page 6 of 6.
Updated on Apr 29, 2015

Microsoft security software detects and removes this worm.

Worms automatically spread to other PCs. Typically, this threat gets installed onto your PC through other worms when you visit a compromised webpage.

This is a generic detection for malicious .INF and .LNK files dropped by different worms, such as IRCBot, Phorpiex, Dorkbot, Caphaw, etc.

Find out ways that malware can get on your PC.

Alert level: severe
Updated on Nov 23, 2015

Microsoft security software detects and removes this family of threats.

This family of malware work together to download other malware, including threats from the Win32/Sirefef and Win32/Medfos families. They can also give a malicious hacker backdoor access and control of your PC.

These threats can be installed at the same time as rogue security software, such as Rogue:Win32/Winwebsec. We have also seen them installed by variants of the Blacole family, the Win32/Beebone family, the Win32/Zbot family, and the Win32/Dorkbot family.

Find out ways that malware can get on your PC.

Alert level: severe
Updated on Apr 22, 2011

Worm:Win32/Pushbot.UZ is a worm that may spread via MSN Messenger and removable drives. The worm also contains backdoor functionality that allows unauthorized access to an affected computer. This worm does not spread automatically upon installation, but must be ordered to spread by a remote attacker.

Alert level: severe
Updated on Oct 28, 2012
Worm:Win32/Vobfus.JG is a member of Win32/Vobfus - a family of worms that spreads via network drives and removable drives. It may also download and execute arbitrary files.
Alert level: severe
Updated on May 23, 2013

Windows Defender Antivirus detects and removes this threat.

Worm:Win32/Dorpiex.A sends Facebook messages that contain a web link that downloads additional malware onto your computer. It is a worm which spreads to other computers. It does this by infecting removable drives (such as USB drives or portable hard disks) that you have plugged into your computer. If you then plug those drives into another computer, the worm will infect that computer as well.

See our infographic to the right for a depiction of how a worm spreads by removable drives.

We have observed it being dropped and run by Trojan:Win32/Alureon.GC.

 

Alert level: severe
Updated on Nov 03, 2014

Windows Defender detects and removes this threat.

This threat downloads and installs other programs onto your PC without your consent, including other malware.

This threat can be installed by an exploit when you visit a malicious or compromised website.

Find out ways that malware can get on your PC.

Alert level: severe
Updated on Mar 20, 2016

Windows Defender detects and removes this threat.

This tool generates software keys.

Malware is often installed along with this tool. Microsoft security software finds malware on more than half of the PCs where we detect this tool.

You can read more about Win32/Keygen in Volume 13 of the Security Intelligence Report.

Find out ways that malware can get on your PC.

Alert level: high
Updated on May 28, 2013

Windows Defender detects and removes this threat.

Worm:Win32/Skypii.A is a worm that spreads through Skype Instant Messenger or Windows Live Messenger by sending malicious links to all instant messenger (IM) contacts.

Alert level: severe
Updated on Sep 09, 2011

Worm:Win32/Wootbot.EI is a worm that includes a backdoor component, which connects to an IRC server and awaits commands from remote attackers. For example, an attacker can send a command to distribute the worm to other computers by exploiting a vulnerability in the Windows service LSASS, described in Microsoft Security Bulletin MS04-011.

Alert level: severe
Updated on Aug 09, 2015

Microsoft security software detects and removes this family of threats.

Threats in this family can steal your sensitive information.

They can be installed on your PC by exploit kits such as JS/Neclu, spam email attachments, or infected removable drives. They can also be downloaded by other malware such as Win32/Gamarue and Win32/Dorkbot.

Alert level: severe