Sophos

W32/Alman-E

Category
Type
What to do
Prevalence low high

Summary

 
How it spreads
  • Network shares
  • Infected files
Affected operating systems Windows
Characteristics
  • Drops more malware
Protection available since 14 February 2008 04:56:11 (GMT)
Detected by All Sophos products
  • Endpoint Security and Control 9.0
  • Small business solutions 4.0

Action

More Information

W32/Alman-E is a DLL component helper virus for the Windows platform.

Once installed, W32/Alman-E creates the file <System>\drivers\IsDrv122.sys. This file is detected as Troj/Rootkit-BZ.

W32/Alman-E includes functionality to:
- inject code into processes including EXPLORER.EXE
- access network shares protected by weak passwords
- downloads code from the internet

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer