Threat Database Worms Worm.Phorpiex

Worm.Phorpiex

By CagedTech in Worms
Published:

Threat Scorecard

Popularity Rank: 12,166
Threat Level: 50 % (Medium)
Infected Computers: 27,805
First Seen: October 5, 2012
Last Seen: October 3, 2026
OS(es) Affected: Windows

The detection of Worm.Phorpiex on your system indicates a potential security threat that requires immediate attention. This type of malware is designed to replicate and spread to other computers, causing damage and disruption to your digital environment. It is essential to understand the nature of this threat and take prompt action to remove it and prevent future infections.

What Is Worm.Phorpiex?

Worm.Phorpiex is a type of malicious software that can infect your computer without your knowledge or consent. It is a self-replicating program that can spread to other computers through various means, such as email attachments, infected software downloads, or exploited vulnerabilities. The primary goal of Worm.Phorpiex is to compromise your system's security and potentially steal sensitive information or disrupt your computer's functionality.

How Worm.Phorpiex Operates

Once Worm.Phorpiex infects your computer, it can operate in various ways, depending on its design and purpose. It may attempt to connect to a command and control server to receive instructions or transmit stolen data. It can also try to spread to other computers on your network or through email and instant messaging applications. Worm.Phorpiex may also attempt to disable security software or hide its presence from detection.

It is crucial to note that Worm.Phorpiex can be highly persistent and may require specialized tools and techniques to remove. Its ability to replicate and adapt makes it a significant threat to your computer's security and stability.

Symptoms of Infection

If your computer is infected with Worm.Phorpiex, you may experience various symptoms, including slow system performance, frequent crashes, or unusual network activity. You may also notice unfamiliar programs or icons on your desktop, or receive suspicious emails or messages. In some cases, Worm.Phorpiex may not exhibit any noticeable symptoms, making it challenging to detect without proper security software.

  • Unexplained changes to your system settings or configuration
  • Increased network activity or bandwidth usage
  • Appearance of unfamiliar programs or files
  • Frequent system crashes or errors

How to Remove Worm.Phorpiex

  1. Boot your computer in Safe Mode with Networking to prevent Worm.Phorpiex from loading and to allow for a more effective removal process.
  2. Use a reputable anti-malware tool, such as SpyHunter, to perform a full scan of your system and detect any malicious files or programs associated with Worm.Phorpiex.
  3. Uninstall any suspicious programs or applications that may be related to the infection.
  4. Reset your web browsers, including Chrome, Firefox, and Edge, to their default settings to remove any malicious extensions or add-ons.
  5. Reboot your computer and perform another scan to ensure that Worm.Phorpiex has been completely removed.

Conclusion

Removing Worm.Phorpiex from your computer requires a thorough and multi-step approach. By following the steps outlined above and using reputable security software, you can help ensure the complete removal of this malware and prevent future infections. It is essential to remain vigilant and proactive in maintaining your computer's security, including keeping your operating system and software up-to-date, using strong passwords, and being cautious when opening email attachments or downloading software from the internet.

Aliases

15 security vendors flagged this file as malicious.

Antivirus Vendor Detection
AVG Generic30.AFOS
AntiVir TR/Jorik.IRCbot.vgn.1
Kaspersky Trojan.Win32.Jorik.IRCbot.vgn
Avast Win32:Malware-gen
McAfee W32/Sdbot.worm!pr
CAT-QuickHeal Trojan.Jorik.IRCbot.vgn
AVG Generic30.BHZ
Fortinet W32/Bublik.MNO!tr
Ikarus Trojan.Win32.Bublik
AhnLab-V3 Trojan/Win32.Bublik
AntiVir TR/Dropper.Gen
Kaspersky Trojan.Win32.Bublik.mno
Avast Win32:Agent-AQGP [Trj]
F-Prot W32/Trojan3.EDR
McAfee Artemis!23AFA7CA23C9

SpyHunter Detects & Remove Worm.Phorpiex

File System Details

Worm.Phorpiex may create the following file(s):
# File Name MD5 Detections
1. winsvc.exe 4c51ef187457a6b60dd65da1785cd77d 475
2. winupd32cfg.exe 525898d3171b336c6a633114a4eb67e8 312
3. winfnsx.exe d9e59a4295926df49c8d6484aa6b8305 147
4. winsvcs.exe 3cbf3552471627f240244765dda0c622 111
5. winsvcr.exe aa4e600d8c199bcf90247c2d01cc405d 102
6. Windows Archive Manager.exe 04cdb6a52dad2af1eaaa5e76bc46796d 94
7. 104931452541650.exe 6974f40df848d49cad0a304794d1fce1 79
8. 104802519125152.exe 70f1e306a6df8f4a479d4a1645dd5186 74
9. winmgr9g8.exe c3b9e320cf30e1795a89e733422cf9d5 65
10. 2084614507.exe 1e1148785375917b1189614a295533dc 49
11. wincrsn.exe c0a5dc4c2de6fdf3ac21450b15d46823 42
12. 158381994823929.exe ec8bc22b6a8b2344355c20a38ba16a96 38
13. winsro.exe 23afa7ca23c9dcc07346d8e7429c0f10 36
14. winsvar.exe ee28f7e96f74b7a469a663a7e453030e 31
15. 138331645016418.exe acc9ea10d6f63e502f43db909754d3f5 30
16. winmgr.exe 282d88e9611a85defc73ed852be3427e 25
17. winvsn.exe 8e9228c6d0e85e77267cf42cafb84c69 6
18. winsrv.exe 68f53bf83b49019dcf5dce066b74630a 3
19. wincrs.exe 2212face6179f75b577426c4013dd91a 2
More files

Registry Details

Worm.Phorpiex may create the following registry entry or registry entries:
Regexp file mask
%APPDATA%\ScreenShot\screen.jpeg
%APPDATA%\Skype\cssrss.exe
%HOMEDRIVE%\_\DeviceConfigManager.exe
%TEMP%\Windows Archive Manager.exe

Directories

Worm.Phorpiex may create the following directory or directories:

%USERPROFILE%\M-1-25-8784-4125-7572
%USERPROFILE%\M-1-52-5782-8754-5245
%USERPROFILE%\M-10-6897-8685-3464
%USERPROFILE%\M-5050324589790225392040235
%USERPROFILE%\M-505045058025025030484340240
%USERPROFILE%\M-78577389809558786
%USERPROFILE%\M-87-78985-6027-77788
%USERPROFILE%\M-9433461589685794657786
%WINDIR%\91295601560973149617056167513670
%WINDIR%\M-50500258608265602480562480650842068024682480
%WINDIR%\M-505045058025025030484340240
%WINDIR%\M-505059270375072397532052973057023740495830
%WINDIR%\M-505076805704006805085868706806085
%WINDIR%\M-50508068750580687808058005
%WINDIR%\M-5050970685462056485602658064280562840
%WINDIR%\M-505958576840600505580505058