Know Your Malware: Dabora.b Removal

Dabora.b is a rapidly spreading Internet worm, which propagates by email in messages with spoofed addresses and fake links that should point to virtual postcards or online music, but instead silently download and install the parasite. Once executed, Dabora.b registers itself in the system and opens a harmless Flash file. Then it runs a spreading routine. The worm gathers email addresses from the Windows Address Book and then uses own mail engine to distribute malicious letters written mostly in Portuguese. Dabora.b automatically runs on every Windows startup.

Related files: spvspool.exe

Dabora.b properties:
Connects itself to the internet
Hides from the user
Stays resident in background Remove Dabora.b, removal instructions

Linked by shanmuga Tuesday, 3rd January 2006 6:22AM