Skip to main content
Microsoft Security Intelligence
Published Dec 29, 2008 | Updated Sep 15, 2017


Detected by Microsoft Defender Antivirus

Aliases: Win32/Iksmas.worm.390656 (AhnLab) Trojan.Waledac.F (BitDefender) Win32/Waledac.D (CA) Email-Worm.Win32.Iksmas.y (Kaspersky) W32/Waledac.gen (McAfee) Trj/MailStealer.F (Panda) W32/Waled-F (Sophos) W32.Waledac (Symantec) Trojan.Waledac.Gen (VirusBuster)


Trojan:Win32/Waledac.A is a trojan that collects e-mail addresses found on the computer on which it is installed and distributes spam e-mail messages. Win32/Waledac.A may also try to contact different websites for posting data and downloading arbitrary executable files.
Manual removal is not recommended for this threat. To detect and remove this threat and other malicious software that may have been installed, run a full-system scan with an up-to-date antivirus product such as the Microsoft Safety Scanner ( For more information, see
Follow us