Skip to main content
Skip to main content
Microsoft Security Intelligence
Cart 0 items in shopping cart
Sign in
Published May 06, 2013 | Updated Sep 15, 2017

Worm:Win32/Dorpiex.A

Detected by Microsoft Defender Antivirus

Aliases: Win32/Injector.AGMQ (ESET) BackDoor.IRC.ngrBot.42 (Dr.Web) Trojan.Spachanel (Symantec) Trojan.Win32.Kryptik.m (Rising AV) winpe/DelfInject.XO (Norman) Worm/Dorpiex.A.10 (Avira) TR/Drop.Injector.ighd (Avira) Trojan-Dropper.Win32.Injector.ighd (Kaspersky) Win32.HLLW.Phorpiex.90 (Dr.Web)

Summary

Windows Defender Antivirus detects and removes this threat.

Worm:Win32/Dorpiex.A sends Facebook messages that contain a web link that downloads additional malware onto your computer. It is a worm which spreads to other computers. It does this by infecting removable drives (such as USB drives or portable hard disks) that you have plugged into your computer. If you then plug those drives into another computer, the worm will infect that computer as well.

See our infographic to the right for a depiction of how a worm spreads by removable drives.

We have observed it being dropped and run by Trojan:Win32/Alureon.GC.

 

To detect and remove this threat and other malicious software that may be installed on your computer, run a full-system scan with an appropriate, up-to-date, security solution. The following Microsoft products detect and remove this threat:

Follow us