Home Malware Programs Worms W32.Fiala.A

W32.Fiala.A

Posted: May 15, 2009

W32.Fiala.A is a worm that spreads itself through your removable drives. W32.Fiala.A blocks certain applications from launching and, in addition to this, W32.Fiala.A may drop Trojans on your PC (such as a Trojan Horse, Hacktool.Rootkit or Trojan.KillAV).

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %DriveLetter%\AUTORUN.INF
    2 %DriveLetter%\JR.PIF
    3 %ProgramFiles%\henaji.pif (this file may be detected as Trojan Horse, Hacktool.Rootkit or Trojan.KillAV)
    4 %System%\dllcache\linkinfo.dll (a clean file that may already be present)
    5 %System%\mfc1.dll (a legitimate copy of Microsoft’s MSVCR71.dll)
    6 %SystemDrive%\AUTORUN.INF
    7 %SystemDrive%\bps.dll (a copy of Trojan Horse)
    8 %Windir%\Fonts\bat.sys (this file may be detected as Trojan Horse, Hacktool.Rootkit or Trojan.KillAV)
    9 %Windir%\Fonts\kpsp.sys (this file may be detected as Trojan Horse, Hacktool.Rootkit or Trojan.KillAV)
    10 %Windir%\Fonts\lstis.sys (this file may be detected as Trojan Horse, Hacktool.Rootkit or Trojan.KillAV)
    11 AS21a669aS
Loading...