Click on screenshot to zoom
Danger level 9
Type: Worms
Common infection symptoms:
  • Connects to the internet without permission
  • Installs itself without permissions
  • Slow Computer
  • Slow internet connection
Other mutations known as:
Worm.Hamweq.DD , Worm.Hamweq.DP

Worm.Hamweq

Worm.Hamweq is a dangerous computer worm that is usually delivered via removable drives (USB flash drives). Worm.Hamweq allows a remote attacker to organize a Distributed Denial of Service attack on some website from your computer, because it has an IRC-based backdoor. The worm can also download and execute other malicious files on your computer.

Since Worm.Hamweq is installed via removable flash drives, you have to be careful about kind of drives you plug into your computer. Disable auto run, so that the drive would not be opened automatically, and if you can, scan the drive with a computer security program before opening it. However, if Worm.Hamweq happens to enter your system, during the installation it injects a code into the explorer.exe process. Explorer.exe is the most commonly using processes especially when you browse your files. Worm.Hamweq creates its own processes that can be found in Windows Task Manager: isee.exe, iuhx32.exe and many more (please refer to the list below the description).

The mentioned processed are the direct proof of the infection, because Worm.Hamweq does not have an interface and thus it is hard to determine if you are not well-versed in computers. At the same time, when Worm.Hamweq is installed it also creates a text file called “Desktop.ini” although the file is absolutely harmless. The Worm also modifies certain registry keys in order to run automatically whenever you boot your Windows.

After the infection Worm.Hamweq most of the time functions as a backdoor. It connects to such IRC servers as tassweq.com, lebanonbt.info or crank.dontexist.com. Once the connection is established the worm can easily download other malicious files and execute them. What is more, your computer can also become a source of a flooding attack against a specific server, so there is no reason why you should allow Worm.Hamweq to remain in your computer.

This worm, slows down your system, and trespasses your privacy, so you have to remove Worm.Hamweq once you determine the infection. Since it is rather complicated to get rid of the malware manually, use a reliable computer safeguard application to terminate Worm.Hamweq for you.

Download Spyware Removal Tool to Remove* Worm.Hamweq
  • Quick & tested solution for Worm.Hamweq removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Worm.Hamweq

Files associated with Worm.Hamweq infection:

wab32.exe
winupd32.exe
ise.exe
mQbol.exe
CyberStation.exe
questscan126.exe
questbrowse145.exe
dll32.exe
microsoft.exe
cryptnet32.dll
spoolsv.exe
wincache.exe
ecleaner.exe
X0R.exe
vcleaner.exe
MyPicture.jpg.com.exe
ise32.exe
geurge.exe
csrxx.exe
Bcuzz.exe
acleaner.exe
acc1.exe
SOFB9D0.tmp.exe
adobearp.exe
wuaucldt.exe
vsbntlo.exe
t7vd.exe
system.exe
syitm.exe
svchost.exe
shwdqme.exe
recycle.exe
psyjo3.exe
Plants vs. Zombies +4 Trainer.exe
packupdate107_2129.exe
mplayer2.exe
lsvb.exe
lsq.exe
jwkd.exe
jwjqa.exe
ju7bd.exe
jikd.exe
InternetToday.exe
install_fr.exe
games.exe
fredg.exe
e89ex.exe
dfe.exe
ComboFix.exe
ciic.exe
boxtechsetup700.exe
Aswebsrv.exe
ajyWlxBiFK.exe
1713252151.exe
recyclebin.exe

Worm.Hamweq DLL's to remove:

cryptnet32.dll

Worm.Hamweq processes to kill:

wab32.exe
winupd32.exe
ise.exe
mQbol.exe
CyberStation.exe
questscan126.exe
questbrowse145.exe
dll32.exe
microsoft.exe
spoolsv.exe
wincache.exe
ecleaner.exe
X0R.exe
vcleaner.exe
MyPicture.jpg.com.exe
ise32.exe
geurge.exe
csrxx.exe
Bcuzz.exe
acleaner.exe
acc1.exe
SOFB9D0.tmp.exe
adobearp.exe
wuaucldt.exe
vsbntlo.exe
t7vd.exe
system.exe
syitm.exe
svchost.exe
shwdqme.exe
recycle.exe
psyjo3.exe
Plants vs. Zombies +4 Trainer.exe
packupdate107_2129.exe
mplayer2.exe
lsvb.exe
lsq.exe
jwkd.exe
jwjqa.exe
ju7bd.exe
jikd.exe
InternetToday.exe
install_fr.exe
games.exe
fredg.exe
e89ex.exe
dfe.exe
ComboFix.exe
ciic.exe
boxtechsetup700.exe
Aswebsrv.exe
ajyWlxBiFK.exe
1713252151.exe
recyclebin.exe
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.