W32.Qakbot!gen3

W32.Qakbot!gen3 is a worm infection, which is also regarded by many experts as cloaked malware.

As a worm infection, W32.Qakbot!gen3 displays similar qualities found in virus malware application, complete with dangerous and destructive codes.

Worm infections, the likes of W32.Qakbot!gen3, are highly capable of mutating and are extremely difficult to find and remove from any infected system. W32.Qakbot!gen3 is no exception – it will hide itself and may further propagate itself onto a network of systems, if given half the chance.

Characteristics of this malware, W32.Qakbot!gen3, are as follows:

* The Process is packed and/or encrypted using a software packing process
* Adds a Registry Key (RUN) to auto start Programs on system start up
* This Process Deletes Other Processes From Disk
* This process creates other processes on disk
* Executes a Process
* Has code inserted into its Virtual Memory space by other programs
* Is terminated as a Process
* Is copied to multiple locations on the system
* Is deleted as a process from disk

W32.Qakbot!gen3will not copy itself into the file attachment to infect the emails; instead it is accompanied by a component which is able to download other malicious programs via the Internet.

Once embed within a computer system, W32.Qakbot!gen3will continue to send infected messages to all the email addresses harvested from the victims’ machine.

W32.Qakbot!gen3 installs itself onto a computer system, employing Rootkit tactics, this way ensuring it remains hidden from all spyware detectors (legitimate ones).

W32.Qakbot!gen3 may enter into a computer via other malware applications or via pornographic websites or other dubious type sites, or via gambling related websites.

The following steps can be taken to ensure the prevention of any infections onto a computer system:

• Enable a firewall on your computer
• Get the latest computer updates for all your installed software
• Use up-to-date antivirus software
• Use caution when opening attachments and accepting file transfers
• Use caution when clicking on links to web pages
• Avoid downloading pirated software
• Protect yourself against social engineering attacks
• Use strong passwords.

The best way to ensure your computer system is not compromised by the presence of this dangerous worm application is to delete W32.Qakbot!gen3 and all its components from the infected system as soon as it has been detected.