Threat Database Worms W32.Facedrest

W32.Facedrest

By SpideyMan in Worms

W32.Facedrest is a malicious self-copying worm that proliferates by sending a link to a copy of itself to all contacts in the infected computer user's Facebook account. When run, W32.Facedrest drops a malicious file for becoming an extension for Firefox. W32.Facedrest then sends spam emails that include a malicious link which takes to a copy of itself to all contacts in the computer user's Facebook account. W32.Facedrest will infect removable storage devices on the compromised PC. W32.Facedrest also connects to a remote doubtful web page. Remove W32.Facedrest immediately after detection.

File System Details

W32.Facedrest may create the following file(s):
# File Name Detections
1. %UserProfile%\Application Data\Mozilla\extensions\youtube@youtube3.com.xpi

Trending

Most Viewed

Loading...