Home Malware Programs Worms W32.Randex!tr

W32.Randex!tr

Posted: April 25, 2006

W32.Randex!tr is a network worm that copies itself as a self-extracting RAR file. W32.Randex!tr is part of other family of IRC worms that spreads through file-sharing. Other related are IRC-Sdbot,W32/Sdbot.worm, W32/Spybot, and W32/Polybot.

W32.Randex!tr uses less passwords in attempted network propagation, for example:
- 12345
- pass
- password

File System Modifications

  • The following files were created in the system:
    # File Name
    1 crsoss.exe
    2 gesfm32.exe
    3 msmonk32.exe
    4 vqmss.exe
Loading...