Threat Database Worms W32.Custam

W32.Custam

W32.Custam is a Windows platform worm that can secretly run in the background of a compromised system. W32.Custam typical spreads via removable drives. Once inside a system, W32.Custam will create a backdoor and connect to an IRC server from which it will receive commands from its author. W32.Custam may also download additional malware onto an infected PC as well as give a remote attacker unauthorized access to a victim's confidential information. Have W32.Custam removed from your PC upon detection.

File System Details

W32.Custam may create the following file(s):
# File Name Detections
1. %SystemDrive%\[RANDOM FOLDER NAME]\[SID]\[RANDOM FILE NAME].exe
2. %SystemDrive%\[RANDOM FOLDER NAME]\[SID]\DeSkToP.ini

Registry Details

W32.Custam may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{63KLC5K0-4OPM-00WE-AAX8-17EF1D187263}

Trending

Most Viewed

Loading...