W32.Spybot.AVEO
W32.Spybot.AVEO is a harmful worm that spreads by exploiting different software and security vulnerabilities. W32.Spybot.AVEO is able to act as a Proxy server, FTP server or Socks4 server. In order to run itself, W32.Spybot.AVEO will modify and create entries in the Windows registry. W32.Spybot.AVEO is also able to capture videos, execute malicious commands and send out e-mails. W32.Spybot.AVEO usually spreads via network shares with weak password protection.
File System Details
W32.Spybot.AVEO may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %System%\windowsupdate.exe |
Registry Details
W32.Spybot.AVEO may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Microsoft\OLE\"Windows Firewall Updater" = "windowsupdate.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\"MaxConnectionsPerServer" = "50"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\"MaxConnectionsPer1_0Server" = "50"
