Home Malware Programs Worms W32/Benjamin

W32/Benjamin

Posted: August 28, 2007

W32/Benjamin is a malignant network worm that affects Windows system. W32/Benjamin comes hidden as a popular movie, music or program files. W32/Benjamin circulates across KaZaA file-sharing networks by fooling KaZaA users into downloading the application and opening it. The size of the W32/Benjamin can differ because W32/Benjamin pads copies of itself with garbage bytes. W32/Benjamin can record Windows system activity and send personal information to remote servers. You should remove W32/Benjamin immediately after detection.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



C:\%System%\Explorer.scr File name: C:\%System%\Explorer.scr
Mime Type: unknown/scr

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Explorer.scr
Loading...