Worm.Failnum Description

Worm.Failnum is a Windows platform worm that spreads via Instant Messengers and removable drives. Worm.Failnum is able to access the internet and communicate with a remote server via HTTP where it will download harmful files from. Worm.Failnum may also open a backdoor into the compromised system. Worm.Failnum can be detected and completely removed with an effective malware removal tool.

Type: Worms

How Can You Detect Worm.Failnum?

Worm.Failnum Technical Report

As new Worm.Failnum details are reported by our customers and findings from our Threat Research Center, we will update this section.

The following Worm.Failnum files with its MD5s were created in the system:

Worm.Failnum has typically the following processes in memory:

• vshost32.exe

Worm.Failnum creates the following registry entries:

• HKEY_LOCAL_MACHINESOFTWAREMICROSOFTWINDOWSNTCURRENTVERSIONWINLOGONUSERINIT userinit

Important Article Disclaimer