Threat Database Worms W32.spacefam

W32.spacefam

W32.spacefam is a computer worm that targets machines with Windows operating systems. W32.spacefam propagates via social networks such as Facebook. W32.spacefam is able to steal a victim's login details and use it for malicious deeds. It will also send messages with infected links to all the contacts on a compromised account. W32.spacefam can be removed with a reliable and updated computer security application.

File System Details

W32.spacefam may create the following file(s):
# File Name Detections
1. %UserProfile%\Application Data\[RANDOM CHARACTERS 2].exe
2. %UserProfile%\Application Data\[RANDOM CHARACTERS 1].exe
3. %Windir%\Temp\[RANDOM CHARACTERS 2].tmp
4. %Windir%\Temp\[RANDOM CHARACTERS 1].tm
5. %Temp%\[RANDOM CHARACTERS].tmp
6. %Windir%\Tasks\fbagent.job

Registry Details

W32.spacefam may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\"[RANDOM CHARACTERS 1].exe" = "%UserProfile%\Application Data\[RANDOM CHARACTERS 1].exe"
HKEY_LOCAL_MACHINE\SOFTWARE\facebook

Trending

Most Viewed

Loading...