Worm.Boinberg

Worm.Boinberg is a worm controlled by IRC. Usually it spreads through Windows Live Messenger and USB drives, so it means that you have to be careful about where you stick your USB flash drive, and whenever you use it outside of your computer, do not forget to run an antimalware scan before sticking it back into your USB port. What is more, Worm.Boinberg is also known to be spreading via RAR and ZIP files as it adds its own copy into the archive.

When Worm.Boinberg gets into your computer, it creates entries in your registry that allows it to start automatically whenever you turn on your computer. This worm has been observed to copy itself into the %APPDATA% directory with a random file name, so there is no exact file name associated with this worm. The worm also hacks genuine Windows processes in order to hide its presence from security products. So if a worm injects itself into such processe as winlogon.exe, svchost.exe or Explorer.exe, you are not very likely to notice the infection at once.

It has been mentioned that Worm.Boinberg spreads through Windows Live Messenger. It happens when a user gets infected with the worm, and then sends messages to the people in the user’s contact list, containing a link to the worm or an attachment with the copy of the infection. The worm always tries to stay up to day and download the latest copy from a remote server. As a result, whenever it spreads, the latest copy of the worm is delivered.

Once Worm.Boinberg is installed and running, it tries to connec to an IRC server in order to receive further instructions on what it is supposed to do. Keep in mind that your computer is not the final stop for Worm.Boinberg and it might try to spread to other computers using various methods such as instant messengers and USB flash drives. Worm.Boinberg is also known for its ability to download various files from the internet and execute them without your knowledge or consent. It can access internet and visit websites, at the same time secretely recording your login information (even your financial data), which it can later on upload to a remote server.

On top of that, it interfers with the usual way you operate your computer and it slows down your system little by little. In the long run it can actually cause a total system crash, so you need to remove Worm.Boinberg from your computer using a reliable antimalware tool. Get yourself a good program that will terminate Worm.Boinberg automatically and you will not need to worry about how you should erase this malware on your own.