Worm.Hamweq

Worm.Hamweq is a dangerous computer worm that is usually delivered via removable drives (USB flash drives). Worm.Hamweq allows a remote attacker to organize a Distributed Denial of Service attack on some website from your computer, because it has an IRC-based backdoor. The worm can also download and execute other malicious files on your computer.

Since Worm.Hamweq is installed via removable flash drives, you have to be careful about kind of drives you plug into your computer. Disable auto run, so that the drive would not be opened automatically, and if you can, scan the drive with a computer security program before opening it. However, if Worm.Hamweq happens to enter your system, during the installation it injects a code into the explorer.exe process. Explorer.exe is the most commonly using processes especially when you browse your files. Worm.Hamweq creates its own processes that can be found in Windows Task Manager: isee.exe, iuhx32.exe and many more (please refer to the list below the description).

The mentioned processed are the direct proof of the infection, because Worm.Hamweq does not have an interface and thus it is hard to determine if you are not well-versed in computers. At the same time, when Worm.Hamweq is installed it also creates a text file called “Desktop.ini” although the file is absolutely harmless. The Worm also modifies certain registry keys in order to run automatically whenever you boot your Windows.

After the infection Worm.Hamweq most of the time functions as a backdoor. It connects to such IRC servers as tassweq.com, lebanonbt.info or crank.dontexist.com. Once the connection is established the worm can easily download other malicious files and execute them. What is more, your computer can also become a source of a flooding attack against a specific server, so there is no reason why you should allow Worm.Hamweq to remain in your computer.

This worm, slows down your system, and trespasses your privacy, so you have to remove Worm.Hamweq once you determine the infection. Since it is rather complicated to get rid of the malware manually, use a reliable computer safeguard application to terminate Worm.Hamweq for you.