Home Malware Programs Worms Malware.Drowor

Malware.Drowor

Posted: July 14, 2010

Malware.Drowor is a network-aware computer Worm which attempts to replicate across any existing network. Malware.Drowor appears as a Windows PE EXE file and poses a high security risk to PC safety. Once a system is infected with Malware.Drowor it may experience data loss and other misbehavior, including a rapid decrease in performance. Remove Malware.Drowor immediately using an updated malware remover.

Aliases

IM-Worm.Win32.Sohanad.dz (Kaspersky Lab)
WORM_VB.FVY (Trend Micro)
W32/Drowor-A (Sophos)
Win32/Sohanad.worm.17920 (AhnLab)

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %System%\0617152D

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
Loading...