Home Malware Programs Worms Worm:MSIL/Tawsebot.A

Worm:MSIL/Tawsebot.A

Posted: October 28, 2010

Threat Metric

Threat Level: 5/10
Infected PCs: 5
First Seen: January 18, 2011
OS(es) Affected: Windows

Worm:MSIL/Tawsebot.A (or Trojan-PWS.MSIL) is a malicious computer worm that attempts to propagate by exploiting local network shares. Trojan-PWS.MSIL will also attempt to join a predefined IRC server and channel in order to allow hackers to participate in dangerous distributed denial-of-service attacks (DDoS). DDoS attacks are an attempt by hackers to make a computer resource unavailable to its intended users. Trojan-PWS.MSIL poses a severe security threat to any PC and should be removed immediately.

Aliases

BackDoor.Generic12.BZME [AVG]Backdoor/Win32.IrcBot [AhnLab-V3]Mal/Generic-L [Sophos]Worm/Agent.77312.8 [AntiVir]UnclassifiedMalware [Comodo]Backdoor.MSIL.IrcBot.da [Kaspersky]Worm.Autorun-2983 [ClamAV]MSIL:AutoRun-D [Avast]Trojan.Gen [Symantec]W32/MalwareF.BTII [F-Prot]a variant of MSIL/Mabegon.A [NOD32]Riskware [K7AntiVirus]Generic.dx!toh [McAfee]Trj/CI.A [Panda]Worm/Generic.BJBA [AVG]
More aliases (23)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%APPDATA%\Update\WindowsUpdate.exe File name: WindowsUpdate.exe
Size: 77.31 KB (77312 bytes)
MD5: 1bb93b8b7e99736d88f1efc96308beb1
Detection count: 85
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\Update
Group: Malware file
Last Updated: February 14, 2011
%APPDATA%\dx10ac\a-updater.exe File name: a-updater.exe
Size: 218.62 KB (218624 bytes)
MD5: b7d654a3ce61f767cc7d78db36cf4f14
Detection count: 33
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\dx10ac
Group: Malware file
Last Updated: January 18, 2011
Loading...