IM-Worm.Win32.Zeroll.g

IM-Worm.Win32.Zeroll.g is a worm that uses standard CeeInject family techniques to obscure itself from PC security programs. Like many other worms that SpywareRemove.com malware researchers have observed, IM-Worm.Win32.Zeroll.g has been found to use network resources to spread to new computers, which makes proper network security an important part of containing any IM-Worm.Win32.Zeroll.g infection. IM-Worm.Win32.Zeroll.g may use a variety of different attacks, depending on the variant that infects your PC; common worm attacks include sending spam email messages, copying malicious files to removable drives, installing other forms of harmful software and monitoring keyboard input for private information. IM-Worm.Win32.Zeroll.g has also been seen engaging in security attacks that would allow criminals to compromise the machine via a backdoor, and should be considered a high-level security risk until you've purged IM-Worm.Win32.Zeroll.g with appropriate software.

The Top Facts to Protect Your PC Against IM-Worm.Win32.Zeroll.g Invasions

IM-Worm.Win32.Zeroll.g can use a variety of methods to spread to new computers, most of which are standard for worms like itself. SpywareRemove.com malware researchers have found that IM-Worm.Win32.Zeroll.g's most frequently-used reproduction strategy is to copy hidden files for itself to network-shared folders and then use Autorun-based vulnerabilities to install itself on any PC that accesses the folders. However, IM-Worm.Win32.Zeroll.g may also be configured to spread by other means, such as:

• IM-Worm.Win32.Zeroll.g may use instant messaging clients to send links or file attachments to names from your contact list. Advanced variants of IM-Worm.Win32.Zeroll.g may even use your own account to do this to reduce suspicion.
• IM-Worm.Win32.Zeroll.g may copy itself to removable drives, thereafter using the same network reproduction tactics to spread to computers that access the same drive.
• Fake codec links, media files and software updates may harbor IM-Worm.Win32.Zeroll.g infections, as well as embedded scripts that install IM-Worm.Win32.Zeroll.g through Flash, Java or ActiveX.

Despite IM-Worm.Win32.Zeroll.g's tendencies to create duplicates of itself, SpywareRemove.com malware experts have found that most worms with similar structure will hide their cloned files with a variety of methods, especially by using Hidden and Attribute flags. Since your ability to see these files with these flags may also be disabled, relying on anti-malware software may be the only way to find all copies of IM-Worm.Win32.Zeroll.g.

The Holes That IM-Worm.Win32.Zeroll.g Drills into Your Computer's Security

In addition to its worm functions, IM-Worm.Win32.Zeroll.g has also shown SpywareRemove.com malware researchers some evidence of having backdoor Trojan functions. Backdoor Trojans like IM-Worm.Win32.Zeroll.g are able to destroy your computer's security by altering network and other security settings, blocking security software and altering important Windows Registry entries. The vulnerability that IM-Worm.Win32.Zeroll.g creates for your PC makes prompt removal of IM-Worm.Win32.Zeroll.g a necessary.

Remote hackers may also use the vulnerabilities that IM-Worm.Win32.Zeroll.g carves into your PC to exert control over the system, although IM-Worm.Win32.Zeroll.g may also limit itself to installing other types of harmful programs. Possibilities include, but aren't restricted to spyware (Trojan-Spy.Win32.Zbot.bfur), browser hijackers (100ksearches.com or Resulturl) and rogue defragmenters (such as Windows Vista System Repair, Windows 7 System Repair or Windows XP System Repair).

IM-Worm.Win32.Zeroll.g is also known by the aliases of VirTool:Win32/CeeInject.gen!DG and IM-Worm.Win32.Zeroll, although closely-related variants, such as IM-Worm.Win32.Zeroll.ag, IM-Worm.Win32.Zeroll.t, IM-Worm.Win32.Zeroll.i and IM-Worm.Win32.Zeroll.r are also known to exist.

Technical Details