Know Your Malware: Exvid Removal

Exvid is a virus that infects all the executable files it finds on local hard drives and accessible network shares. The parasite also attempts to spread by e-mail. Exvid sends bogus messages with malicious attachments to randomly generated e-mail addresses. Furthermore, the virus includes an integrated keylogger that records all user keystrokes and periodically sends gathered data to a predetermined e-mail account. Exvid runs on every Windows startup.

Related files: svchost.exe, kdbdll.dll, mydocument.exe, mydocument[X].exe, mypassword.exe, mypassword[X].exe, mypicture.exe, mypicture[X].exe, myvideo.exe, myvideo[X].exe, sexvideo.exe, sexvideo[X].exe

Exvid properties:
Sends out logs by FTP or email
Logs keystrokes
Hides from the user
Stays resident in background Remove Exvid, removal instructions

Linked by shanmuga Thursday, 16th February 2006 6:46AM