Skip to main content Threats Blogs Antimalware updates Definition change log Windows security Microsoft Defender ATP Microsoft Threat Protection Malicious Software Removal Tool (MSRT) Safety Scanner Microsoft Defender Offline Submit a file View submission history Report unsafe site Attack surface reduction Sources of infection Avoid tech support scams Troubleshoot detection and removal Up-to-date software Developer resources Threat naming Threat identification criteria Security industry alliances Microsoft Security Azure Dynamics 365 Microsoft 365 Microsoft Teams Windows 365 Microsoft AI Azure Space Mixed reality Microsoft HoloLens Microsoft Viva Quantum computing Sustainability Education Automotive Financial services Government Healthcare Manufacturing Retail Find a partner Become a partner Partner Network Microsoft Marketplace Software companies Blog Microsoft Advertising Developer Center Documentation Events Licensing Microsoft Learn Microsoft Research View Sitemap
6 entries found.
Updated on Jun 14, 2011

Windows Defender detects and removes this threat.

This family of worms can steal your user names and passwords by watching what you do online. They can also download other malware and stop you from visiting security-related websites. Some variants can use your PC in a denial of service (DoS) attack.

They spread via infected USB flash drives, or in a malicious link sent though instant messaging programs and social networks.

Find out ways that malware can get on your PC.  

Alert level: severe
Updated on Jun 14, 2011

Windows Defender detects and removes this threat.

This family of worms can steal your user names and passwords by spying on what you do online. They can block websites that are related to security updates and launch a limited denial of service (DoS) attack.

They spread through USB flash drives, instant messaging programs, and social networks.

There is more information in the Win32/Dorkbot family description.

Find out ways that malware can get on your PC.  

Alert level: severe
Updated on Sep 07, 2011

Worm:Win32/Wootbot.EI is a worm that includes a backdoor component, which connects to an IRC server and awaits commands from remote attackers. For example, an attacker can send a command to distribute the worm to other computers by exploiting a vulnerability in the Windows service LSASS, described in Microsoft Security Bulletin MS04-011.

Alert level: severe
Updated on Mar 11, 2015

Microsoft security software detects and removes this worm.

Worms automatically spread to other PCs. Typically, this threat gets installed onto your PC through other worms when you visit a compromised webpage.

This is a generic detection for malicious .INF and .LNK files dropped by different worms, such as IRCBot, Phorpiex, Dorkbot, Caphaw, etc.

Find out ways that malware can get on your PC.

Alert level: severe
Updated on Mar 16, 2015
Alert level: severe
Updated on Nov 29, 2011
Alert level: severe
English (United States)
Your Privacy Choices Opt-Out Icon Your Privacy Choices
Consumer Health Privacy Sitemap Contact Microsoft Privacy Manage cookies Terms of use Trademarks Safety & eco Recycling About our ads