MSN-Worm.Sinmsn.c, W32/Smibag.worm.dr, Win32.HLLW.Admagic, W32/Smibag-A, Win32/HLLW.Smibag.C ,
WORM_SMIBAG.A, Worm/MSN.Sinmsn.DRP, W32/Simbag.A.worm, Win32/Smibag.B,
Category: Computer Worm
Active & Spreading
Asia, North and South America, and some parts of Europe and Australia
26 Sep 2003
The W32.Smibag.Worm application is a worm that tries to multiply itself through the MSN messenger Korean version. It also executes and drops Adware.Admagic.
W32.Smibag.Worm Removal Tool
If you have Malware on your computer it will cause annoyances and will damage your system. You should either:
A. Manually remove the infected files from your computer, or
B. Automatically scan your system using trusted software
We recommend that you scan your system for malware. Our partner has a computer worm removal tool to automatically clean W32.Smibag.Worm from your computer.
More details about W32.Smibag.Worm
The W32.Smibag.Worm program is a worm that tries to multiply itself through the MSN messenger Korean version. It also executes and drops Adware.Admagic. When the W32.Smibag.Worm program is opened, it inserts the following files: “.uz.exe”, “.ext.zip”, “.admagic.exe”, “.atl.dll”, “.msnVC.exe”, “.aw32x.dll”, “.sm.dll”, “C:admagic.exe”, “C:smb.exe”, “C: est.txt”, “%System%aw32x.dll”, “%System%sm.dll”, and “%System%uz.exe”. The worm adds value to the registry key. The worm utilizes the temporary file “MsnVC.exe” to spread itself through the MSN Messenger Korean Version.
The W32.Smibag.Worm program may download additional files for the computer without the user’s consent. The application may download additional files such as spyware application, Remote Access Tool, advertising software and backdoor Trojan program. The program may automatically install the downloaded files in the computer.