Win32/Xorer

Win32/Xorer is a worm, which is a member of a Xorer family of worms and viruses. Win32/Xorer downloads copies of the malevolent code into removable drives. Win32/Xorer is configured to start automatically whenever the corrupted drive is accessed. Using the corrupted drive to the other computer with enabled autorun feature also runs the code of Win32/Xorer without the computer owner's knowledge. Variants of Win32/Xorer are also deployed as contents in Winrar compressed file that is accessed once the code is extracted. While being executed, Win32/Xorer may conduct numerous harmful actions on the targeted PC. Win32/Xorer makes modifications to the Windows Registry by adding a specific registry entry to disable some Windows functions. Win32/Xorer can also disable autorun feature on the infected computer to instantly run other versions of Win32/Xorer from the same group. Win32/Xorer has a capability of installing a rootkit service on the vulnerable computer. Win32/Xorer adds a file to the root of every writable drive it founds attached to the affected computer. Win32/Xorer will create a specific Windows service to initiate itself whenever you start a computer.