Threat Database Worms W32.Masavebe

W32.Masavebe

By GoldSparrow in Worms

Threat Scorecard

Ranking: 2,798
Threat Level: 10 % (Normal)
Infected Computers: 59,888
First Seen: October 6, 2011
Last Seen: September 14, 2023
OS(es) Affected: Windows

W32.Masavebe is a malicious worm that circulates through removable drives. W32.Masavebe creates its registry entry to run every time a PC user starts his/her computer. W32.Masavebe then opens a back door and connects to the certain IRC server. W32.Masavebe can steal information from some programs involving MSN Messenger, Filezilla, Firefox and Vitalwerks Dynamic DNS Update Client. Eliminate W32.Masavebe immediately after detection.

File System Details

W32.Masavebe may create the following file(s):
# File Name Detections
1. %Temp%\34542.exe

Registry Details

W32.Masavebe may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Microsoft\CurrentVersion\Run\"MSN" = "%Temp%\34542.exe"

URLs

W32.Masavebe may call the following URLs:

.pdf-maker.com

Trending

Most Viewed

Loading...