Worm.Agobot.WOPW
Worm.Agobot.WOPW is a dangerous worm that spreads across different computer networks with weak passwords. Worm.Agobot.WOPW is able to secretly run in the background of a system and open a backdoor to it. Worm.Agobot.WOPW may also disable certain anti-virus software settings. Worm.Agobot.WOPW can make a system vulnerable to other malware attacks, putting a victim's private data at risk of being stolen.
Table of Contents
Aliases
7 security vendors flagged this file as malicious.
| Anti-Virus Software | Detection |
|---|---|
| - | Win32/AgoBot.worm.232675 |
| - | Worm:Win32/Gaobot |
| - | W32/Agobot-DS |
| - | WORM_IRCBOT.KW |
| - | W32/Gaobot.worm.gen.e |
| - | Backdoor.Win32.Agobot.ua |
| - | W32.HLLW.Gaobot.gen |
File System Details
Worm.Agobot.WOPW may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %System%\winampa.exe |
Registry Details
Worm.Agobot.WOPW may create the following registry entry or registry entries:
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_WIN_L4OAHDER]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Win l4oahder\Security]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Win l4oahder]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_WIN_L4OAHDER\0000]
