W32.Flamer

W32.Flamer is a worm that is spread through removable drives. W32.Flamer also opens a back door on the corrupted PC and may steal confidential data from its victims. W32.Flamer attempts to bypass the detection by anti-virus application by saving its complex code in .OCX files, not usually checked by anti-virus software in their default configuration. However, if W32.Flamer detects McAfee's on-access scanner McShield, instead, it saves its code in .TMP files. Once a computer system is infected, W32.Flamer performs malicious actions including taking screenshots, recording audio conversations, sniffing the network traffic, intercepting the keyboard, and other. All this data is available to the attackers through the link to Flame's command-and-control (C&C) servers.

Table of Contents

1

SpyHunter Detects & Remove W32.Flamer