W32/Polipos.A Worm

 Information about the W32/Polipos.A Worm:

W32/Polipos.A is a memory-resident network worm. The worm will infect Windows systems and spreads through P2P software such as Gnucleus 2.0.0.6 and BearShare.

Upon execution, it injects itself into running processes in order to hide its presence. It infects all .exe and .scr files in the Program files folder and Windows System folder of the infected computer.

The worm searches for the following checksum databases in the folder and deletes the same if present;

avg.avi
vs.vsn
avp.crc
ivb.ntz
ivp.ntz
avgqt.dat
lguard.vps
chklist.ms
aguard.dat
chklist.cps
smartchk.ms
smartchk.cps
drwebase.vdb
anti-vir.dat

It tries to terminate some of the security related processes.

This worm first appeared on April 21, 2006.

 Other names of W32/Polipos.A Worm:

This Worm is also known as PE_POLIP.A, W32.Polip, W32/Polipos, W32/Polipos-A, P2P-Worm.Win32.Polip.a .