A forum for reverse engineering, OS internals and malware analysis 

Forum for completed malware requests.
 #7970  by Quads
 Fri Aug 12, 2011 11:44 pm
Has anyone come across the Worm:Win32/Allaple variant that has appeared in the last week or so. Also called W32.Rahack??

AV's seems to detect some of it and delete the detection but the files get possibly recreated to be detected again etc.

Looks like it could be this one http://www.threatexpert.com/report.aspx ... 51dd84709d

Thanks

Quads
 #7981  by PX5
 Sat Aug 13, 2011 2:14 pm
Quads wrote:Has anyone come across the Worm:Win32/Allaple variant that has appeared in the last week or so. Also called W32.Rahack??

AV's seems to detect some of it and delete the detection but the files get possibly recreated to be detected again etc.

Looks like it could be this one http://www.threatexpert.com/report.aspx ... 51dd84709d

Thanks

Quads

Seems to be a flood of these, well over 500 in 72h
Attachments
(582.73 KiB) Downloaded 74 times