XBlock By Actiance - Home
Someone Spying on You? Fight Back!
Currently Notice: Undefined variable: incprefix in /data/www/xblock/product_show.php on line 123 25,860,543 Spy Software Busted!
Full Name:
 W32.Lovgate.AC@mm
Type: Worm
Danger Level: 7
Category Description: Virus-like program that spreads automatically to other computers by sending itself out by email or by any other means. A program that propagates itself by attacking other machines and copying itself to the affected machine.

Worms have self-replicating code that travels from machine to machine by various means. A worms first objective is merely propagation. Worms can be destructive depending on what payload they have been given. Worms may replace files, but do not insert themselves into files.
Comment: Research has shown this email worm will use random filenames. These were actually found inside the directory - C:\Program Files\Common Files\GMT which is a Gator directory. Here is a list of some of the filenames.

support tools.exe
mmc.exe
autoexec.bat
winhlp32.exe
msdn.zip.pif
documents and settings.txt.exe
microsoft office.exe
client.exe
windows media player.zip.exe
xcopy.exe
internet explorer.bat
cain.pif
findpass.exe
windowsupdate.pif
i386.exe
winrar.exe

There is nothing relating the files to Gator but simply shows at this point that the infection can be dropped anywhere. CAUTION: DO NOT delete the file names listed above even if you find them on your computer. Use a cleaning application to identify infection and remove it. You can find a freeware cleaner that picks up this infection at http://www.xblock.com/installer.shtml
   
Properties:

Back to the list of products removed by X-Cleaner
© Copyright 2003-2011, Actiance, Inc. All rights reserved.   Privacy Policy