Home Malware Programs Worms W32.Wapomi.D

W32.Wapomi.D

Posted: March 1, 2013

Threat Metric

Threat Level: 1/10
Infected PCs: 66
First Seen: March 1, 2013
Last Seen: February 7, 2023
OS(es) Affected: Windows

W32.Wapomi.D is a worm that proliferates by creating copies of itself to removable and network drives. W32.Wapomi.D affects .exe, .html, .asp, .htm, and .aspx files, and strives to disable anti-virus programs. W32.Wapomi.D also affects executable files within .rar files stored on shared network resources. When W32.Wapomi.D is executed, it downloads the file, which is used to disguise the existence of the worm. W32.Wapomi.D registers the file as a service. W32.Wapomi.D creates the registry subkey in an attempt to disable certain anti-virus programs. W32.Wapomi.D strives to block numerous antivirus-related files from running. W32.Wapomi.D deletes registry entries under the subkey in order to block the computer from restarting in Safe Mode.

Technical Details

Additional Information

The following URL's were detected:
searchstreamz.com
Loading...