Worm.Slimbraju.A

Worm.Slimbraju.A is a surreptitious and harmful worm that can spread from one compromised PC to another one without any user interaction necessary. The worm was first released on 4 June 2011, and it has been reported that Worm.Slimbraju.A will copy itself to network drives and removable data, and exploit vulnerabilities in uninfected PCs such as system security susceptibilities in order to spread its infection. It has also been reported that Worm.Slimbraju.A comes attached to suspect emails and through an instant message.

The worm was designed to spy on the user’s activity and captures the keystrokes on the system. It will connect to the Internet without the user’s knowledge and without being prevented from doing so by a firewall by making certain registry modifications. This is done in an effort for Worm.Slimbraju.A to relay the data it spied on from the user to its developers. It will make the following modifications to the registry:

Adds value: ".exe"
With data: ".exe:*:enabled:pencat"
To subkey: HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List

The worm will also modify the system so that it executes each time the user logs on to Windows. Because of its surreptitious infiltration of the system, the user will be hard pressed to detect and remover Worm.Slimbraju.A without some help. In order to restore your PC’s security and safety, get rid of Worm.Slimbraju.A by using a properly functioning security tool. This will not only obliterate Worm.Slimbraju.A buit also protect the system against future attacks and threats.