Threat Database Worms Worm.Folstart.A

Worm.Folstart.A

By LoneStar in Worms

Threat Scorecard

Threat Level: 50 % (Medium)
Infected Computers: 254
First Seen: May 31, 2011
Last Seen: May 25, 2022
OS(es) Affected: Windows

Worm.Folstart.A is a worm that circulates from one PC to another via removable drives. Worm.Folstart.A does not corrupt the system files directly, but it can modify lots of system settings according to the attacker's aims. Worm.Folstart.A infiltrates into the corrupted PC without a victim's consent and awareness. When activated, Worm.Folstart.A distributes malevolent files. Worm.Folstart.A queries a specific registry key to make sure if there are any USB devices connected to the workstation. Once a device is detected, Worm.Folstart.A searches the drive for any folders that might be there and copies itself into the folder, using the folder?s name, without any extension. Worm.Folstart.A even copies the icon of the folder, so when a PC user opens the device and sees the icon, Worm.Folstart.A is executed as a simple folder.

Aliases

15 security vendors flagged this file as malicious.

Anti-Virus Software Detection
BitDefender Worm.Generic.311224
BitDefender Worm.Generic.320405
AVG Worm/Generic_r.JV
Fortinet W32/Rotinom.SME!tr
F-Prot W32/AutoRun.AL.gen!Eldorado
AntiVir Worm/Folstart.A.19
Fortinet W32/Agent2.LDT!tr
AntiVir Worm/Folstart.A.21
Kaspersky P2P-Worm.Win32.Palevo.erme
Fortinet W32/Dx.SWB!tr
Ikarus Trojan.Win32.Agent
AntiVir Worm/Folstart.A.20
Kaspersky Trojan-Dropper.Win32.Autoit.bgd
F-Prot W32/MalwareF.CGLQ
CAT-QuickHeal Worm.Folstart.A2

Trending

Most Viewed

Loading...