Polip Worm Creeps Through P2P Networks
Posted: Sat May 06, 2006 5:39 pm
[quote]
Experts at MicroWorld Technologies inform that ‘Win32.Polip.A’ is a polymorphic P2P Worm that infects Portable Executable(PE) files like ‘.scr’ and ‘.exe’, while spreading via P2P networks and File Sharing applications.
Inside the infected PC, Polip.A hides its presence by cleverly inserting itself into running processes which makes it hard to detect and remove, for many AntiVirus solutions. Its encryption and stealth features make matters worse.
“We are trying to ascertain the destruction caused by this Worm. From what we see so far, Polip deletes .avi, .dat, .ms and .vps files from the directory it resides in. It also attempts to connect to the ‘Gnutella network’ even if the Gnutella software is not installed in the computer,â€
Experts at MicroWorld Technologies inform that ‘Win32.Polip.A’ is a polymorphic P2P Worm that infects Portable Executable(PE) files like ‘.scr’ and ‘.exe’, while spreading via P2P networks and File Sharing applications.
Inside the infected PC, Polip.A hides its presence by cleverly inserting itself into running processes which makes it hard to detect and remove, for many AntiVirus solutions. Its encryption and stealth features make matters worse.
“We are trying to ascertain the destruction caused by this Worm. From what we see so far, Polip deletes .avi, .dat, .ms and .vps files from the directory it resides in. It also attempts to connect to the ‘Gnutella network’ even if the Gnutella software is not installed in the computer,â€