Home Malware Programs Worms Worm.Zhelatin.ml

Worm.Zhelatin.ml

Posted: March 4, 2007

Threat Metric

Threat Level: 9/10
Infected PCs: 15
First Seen: July 24, 2009
OS(es) Affected: Windows

Worm.Zhelatin.ml is a mass-mailing worm that propagates in the Internet by email and in local networks by exploiting computers running the Windows operating system with known vulnerabilities. Worm.Zhelatin.ml scans local drives for text and spreadsheet documents, as well as web pages and various programming files. Then Worm.Zhelatin.ml sends e-mail messages to all the addresses it gathers from found files by using own mail engine. Worm.Zhelatin.ml also opens a backdoor providing the attacker with remote unauthorized access to the compromised computer and allowing him to control the system and steal user sensitive information.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



install.exe, noskrnl.exe, away.exe.exe File name: install.exe, noskrnl.exe, away.exe.exe
Size: 125.29 KB (125290 bytes)
MD5: 53ba6f796e6069870416247bfd9f399b
Detection count: 81
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
drabste.exe File name: drabste.exe
Size: 7.53 KB (7530 bytes)
MD5: de2b6e7b917f7459f2bb7e6a1d3c35f4
Detection count: 61
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
Loading...