Threat Database Viruses W32.Xpiro.C

W32.Xpiro.C

By Domesticus in Viruses

W32.Xpiro.C is a virus that infects executable files – programs, in other words. Although it isn't a very common or widespread virus, it is capable of doing some serious damage to the infected computer, and infection rates of W32.Xpiro.C seems to be on the rise.

W32.Xpiro.C’s Origin and Prognostic

W32.Xpiro.C is not a new virus; it has been around since 2007 or 2008, and it is also referred to as W32.Expiro.C. Over the years that it has been active and causing infections, W32.Xpiro.C has not seen any shifts in purpose, effects, or risk factor. It does the same things now that it has always done. Specifically, W32.Xpiro.C infects .exe files by appending its malicious code onto the file. Sometimes this works, and sometimes it doesn't – and when it doesn't work, the result is a file that is corrupted, unusable, and unstable, so one concern with W32.Xpiro.C is that any number of programs on the affected computer could become completely useless or harmful. Although W32.Xpiro.C tries to conceal its presence within infected files, these malignant effects are obvious.

W32.Xpiro.C also tries to steal information from the infected computer. However, rather than listening to any port activity, logging keystrokes, or tracking Internet usage, W32.Xpiro.C looks for information on the computer itself. In particular, W32.Xpiro.C will look for the product key for the computer's copy of Windows, as well as any email account information that it can steal that might be associated with the registration of Windows. Other information stored on the affected computer may be at risk, and there have been reports of other information being stolen.

How W32.Xpiro.C Spreads

This particular virus is one that is commonly transmitted over peer-to-peer networks, such as filesharing networks. Once on the host computer, W32.Xpiro.C will seek out executable files in all directories, in all versions of Windows, and try to infect them. The results, aside from pirating of your personal information, can include a system that behaves in ways that are erratic, unpredictable, and unstable. An infection of W32.Xpiro.C looks like what most people expect a virus to look like, but by the time you're seeing its effects, it's far too late to take any preventative measures. W32.Xpiro.C is best avoided, by keeping updated security software and refraining from using sketchy peer-to-peer services.

File System Details

W32.Xpiro.C may create the following file(s):
# File Name Detections
1. %AppData%[random]
2. %temp%[random]

Registry Details

W32.Xpiro.C may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[random]"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random]"

Trending

Most Viewed

Loading...