Threat Database Worms Worm:Win32/Phorpiex.O

Worm:Win32/Phorpiex.O

By ZulaZuza in Worms

Threat Scorecard

Threat Level: 80 % (High)
Infected Computers: 4
First Seen: December 14, 2012
Last Seen: June 12, 2019
OS(es) Affected: Windows

Worm:Win32/Phorpiex.O is a worm that drops other malevolent files, which may be found as malware infections. Worm:Win32/Phorpiex.O proliferates via instant messaging programs, such as Skype, Google Talk, Paltalk, Xfire, ICQ, and Windows Live Messenger. PC users may unknowingly download Worm:Win32/Phorpiex.O, thinking it is a genuine program. Worm:Win32/Phorpiex.O sends a message to all of the affected computer owner's contacts, and strives to attract or fool him/her into downloading and opening a picture, which may be a copy of Worm:Win32/Phorpiex.O. The message is localized, and Worm:Win32/Phorpiex.O selects which message to send depending on the set language of the compromised PC. While being installed on the infected computer, Worm:Win32/Phorpiex.O makes system changes by showing a message or link in your Skype,, Google Talk, Paltalk, Xfire, ICQ, or Windows Live Messenger conversation history that the computer user does not recall writing. Worm:Win32/Phorpiex.O will also add potentially malevolent files. Worm:Win32/Phorpiex.O is started when the PC user executes or opens the infected file. These files may be used by Worm:Win32/Phorpiex.O to help delivering its payload. Once the payload is performed, Worm:Win32/Phorpiex.O downloads and runs the specific file to uninstall itself from the PC.

SpyHunter Detects & Remove Worm:Win32/Phorpiex.O

File System Details

Worm:Win32/Phorpiex.O may create the following file(s):
# File Name MD5 Detections
1. MaryJane.exe daaaffff39828546658bc14e160c1a95 2
2. %TEMP%\rmrf.bat
3. %TEMP%\.exe
4. %TEMP%\ZSa.tmp
5. %TEMP%\NRRQSCAkYD.zuG
6. 5e8927f5ebde777e07d2828edc61df1a 5e8927f5ebde777e07d2828edc61df1a 0
7. Chiho.exe 93c86be05409ccca59fe637e91b07303 0
8. eb48d1c58b8d9fc1688f76dfecb5e27d eb48d1c58b8d9fc1688f76dfecb5e27d 0
9. Chiho.exe 8c8d86a6dcc1fcb22a314ad681cbb12e 0

Messages

The following messages associated with Worm:Win32/Phorpiex.O were found:

Worm:Win32/Phorpiex.O uses the following messages for the Dutch language:

ben jij dat op dit foto?
dit foto zal je echt eens bekijken!
ik hoop dat jij het net bent op dit foto
ken je dat foto nog?
ken je dit foto al?
kijk wat voor een foto ik heb gevonden
zo iets leilijk heb ik nog nooit in mijn leven gezien
Worm:Win32/Phorpiex.O uses the following messages for the German language:

bist du das auf dem foto?
das foto solltest du wirklich sehen
hab ich dir das foto schon gezeigt?
kennst du das foto schon?
schau mal das foto an
schau mal welches foto ich gefunden hab
so will ich nicht aussehen wenn ich alt bin
unglaublich welche fotos leute von sich machen schau mal
wie findest du das foto?
Worm:Win32/Phorpiex.O uses the following messages for the Italian language:

chi e in questa foto?
conosci la persona in questa foto?
dopo che hai visto la foto, tu non dormirai piu
hai visto questa foto?
la foto e grandiosa!
ti piace la foto?
ti ricordi la Foto?
Worm:Win32/Phorpiex.O uses the following messages for the Spanish language:

a tengo esta foto tuya del invierno pasado, te acordas?
creo que no voy a poder dormir más despues de ver esta foto. mirá
esta foto es gracios
mis padres me van a matar si ven esta foto mia, que decis?
no puedo creer que todav
quedarí a bien si pongo esta foto en mi perfil? o me veo medio mal?
Worm:Win32/Phorpiex.Ouses the following messages for the Romanian language:

asta e ce-a mai funny poza! tu ce zici?
nu cred ca voi mai putea dormi dupa ce am vazut poza asta. tu ce zici?
nu imi mai voi face niciodat poze!! toate ies urate ca asta.
spune-mi ce crezi despre poza asta.
zimi ce crezi despre poza asta?

Trending

Most Viewed

Loading...