Threat Database Worms W32.Spybot.AVEO


W32.Spybot.AVEO is a harmful worm that spreads by exploiting different software and security vulnerabilities. W32.Spybot.AVEO is able to act as a Proxy server, FTP server or Socks4 server. In order to run itself, W32.Spybot.AVEO will modify and create entries in the Windows registry. W32.Spybot.AVEO is also able to capture videos, execute malicious commands and send out e-mails. W32.Spybot.AVEO usually spreads via network shares with weak password protection.

File System Details

W32.Spybot.AVEO may create the following file(s):
# File Name Detections
1. %System%\windowsupdate.exe

Registry Details

W32.Spybot.AVEO may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Microsoft\OLE\"Windows Firewall Updater" = "windowsupdate.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\"MaxConnectionsPerServer" = "50"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\"MaxConnectionsPer1_0Server" = "50"


Most Viewed