Home / Spyware Encyclopedia / Worm.Rays
 Worm.Rays Technical Details
Category Worm
Discovered 7/24/2007 5:05:00 PM
Modified 8/7/2009 10:14:47 AM
Threat Level High
Category Description

A Worm is a malicious program that spreads itself without any user intervention. Worms spread without attaching to or infecting other programs and files. A Worm can spread across computer networks via security holes on vulnerable machines connected to the network and also through email by sending copies of itself to everyone in the user's address book. A Worm may consume a large amount of system resources and cause the machine to become noticeably sluggish and unreliable.
Notice
Summary

The following http urls were started: NA
The hosts file was updated with the following url-to-ip mappings: NA
The following internet connection was established: NA

The following Files were created:

NameVersionPublisherSignature (MD5)File Size (in KB)
..\temp\845826db.exe1.0.0.0gyb6ee41aa2272ad5d10af33a8247b5fca114688
..\B5D52C41.EXE1.0.0.0gy3abddeb8e15e6f463161478fad4b3db569632
..\Temp\B8A93418.EXE1.0.0.0gy7c49b6ec58e9b8d3b9ec51848dfddda553248
..\DB50A709.EXE1.0.0.0gyb71f5cfb4d60650d87571a19cdf4298350597
..\50F5B476.EXE1.0.0.0gy7761100d35ec2ef404ec3f12b78cfa8861952
..\Mstray.exe1.0.0.0gy7761100d35ec2ef404ec3f12b78cfa8853248
..\50F5B476.EXE1.0.0.0gy 61952
..\Mstray.exe1.0.0.0gy 53248
..\b19945e9.exe1.0.0.0gyf07399c087f34fac7bda34332135b959167008
..\91bfe8bf.exe1.0.0.0gy7d1782b313c94eec65048cdafba93afe24064
..\3587fd13.exe1.0.0.0gy42e89a441575429b96b3025cb7ff1b4b253280
..\a852da97.exe1.0.0.0gy30635024d4580328b54b6ba860c28432117795
..\ce21a437.exe1.0.0.0gy2ddb3a7212a38fa219d33d5225d536a7147456
..\c541895c.exe1.0.0.0gy2590555cd555d7c950dddcb7ce4a48f8131589
..\78c1aabf.exe1.0.0.0gy139828a3a60dac849a05634f70b63525129536
..\847dfa0d.exe1.0.0.0gy032142269bc293dc3e3a798a5bb8b65881920
..\3587fd13.exe1.0.0.0gy 253280
..\ce21a437.exe1.0.0.0gy 147456
..\c541895c.exe1.0.0.0gy 131589
..\b19945e9.exe1.0.0.0gy 167008
..\a852da97.exe1.0.0.0gy 117795
..\91bfe8bf.exe1.0.0.0gy 24064
..\847dfa0d.exe1.0.0.0gy 81920
..\78c1aabf.exe1.0.0.0gy 129536
..\f01b47da.exe1.0.0.0gy79d8c0e16746de2e82d1058d7d3fbb1e31604
..\436bb184.exe1.0.0.0gy705d1026c4742407f4cbd04fb4227eff117520
..\4730c0dd.exe1.0.0.0gy6f38730928a354f4cdef469e48cc329449669

The following Registry Entries were created:

•..\System\CurrentControlSet\Services\expiorer.exe
•..\Software\Microsoft\Windows\CurrentVersion\Run\\"RAVTIMEXP"\"%WIN%\MSTRAY.EXE"
•..\Software\Microsoft\Windows\CurrentVersion\Run\\"TempCom"\"%WIN.FONTS%\9541B.com"
Recommendation to remove Worm.Rays

Spyware Detector can remove Worm.Rays, and thousands of other Spyware automatically and instantly. Click here to download Spyware Detector and scan for free.
Download Spyware Detector and Scan for FREE
 
Search Threats
Customer Service Rating by LivePerson