Home Malware Programs Worms Worm.Win32.VB.bem

Worm.Win32.VB.bem

Posted: May 25, 2011

Worm.Win32.VB.bem is a malicious computer worm that spreads through email or IM messages and any form of attachment or link in an email that may include a link to an affected website. Worm.Win32.VB.bem may copy itself over local and network computers and drop infected files into windows system folders. Worm.Win32.VB.bem will collect personal information from a corrupted computer and send it to the predefined remote server. Once there is a file-sharing network or the network share is not protected, Worm.Win32.VB.bem will take advantage of these situations and injure the remote computers. It is therefore, highly recommended removing Worm.Win32.VB.bem immediately from your computer in order to protect your machine.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 [file and pathname of the sample #1]

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run][HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion]HKEY..\..\..\..{RegistryKeys}[HKEY_CURRENT_USER\Control Panel\Desktop]
Loading...