QAZ WORM DETECTED WITH BACKDOOR ABILITIES

Virus Name  : Worm.QAZ

Alias             : I-Worm.QAZ, W32.QAZ.Worm, WORM_QAZ

Virus type    : Network worm

Threat level : Low

Virus details :

                     QAZ is a network worm, spreads using shared network drives. The worm is 120320 bytes long {120KB} and written in Visual Basic C++. It is a companion type worm and won't infect other files. QAZ will infect only the shared drives within the network. This may be purposefully mailed to steal your valuable data.

                     When executed, it will search for Windows folder in the local system and network and copies to "notepad.exe". The original notpad.exe file is renamed to note.com. Then it modifies the registry entries to start automatically.

                     The noticeable property of this worm is its backdoor ability. Using this ability, the worm author can load and run additional programs to steal the data in the network. It also communicates with an IP address 202.106.185.107 and sends the infected machines IP details. It may be belongs to QAZ worm author's host.

                     Right now three variants of QAZ worm reported in the wild. Solo detects and removes all QAZ variants without problems.

How can I protect my system?

                   Solo has incorporated QAZ worm in its signature file to protect users from this worm attack. Solo antivirus registered users are already protected from this worm. Make sure that you have installed registered version of Solo Antivirus to protect your system from all virus threats.

How to remove this worm?

                   If you are already infected with this worm, you can remove it from your computer using Solo Antivirus software. Solo antivirus can detect and remove QAZ worm safely. Use the following link to Download 30 day trial version of Solo antivirus [1670 KB] to remove viruses from your computer.

                   Solo anti-virus not only scans for all viruses, it contains a unique System Integrity Checker to protect you from New Internet Worms, Backdoors and malicious VB, Java Scripts. It also effectively removes all existing Internet Worms, File viruses, malicious VB, Java scripts, Trojans, Backdoors, boot sector, partition table and macro viruses.

You can purchase Solo antivirus using the link