W32.Randex.Y is a network-aware worm that will copy itself as the following files:
\Admin$\system32\netd32.exe
\c$\winnt\system32\netd32.exe
Copies itself as %System%\XBox64.exe.
The worm receives instructions from an IRC channel on a predefined IRC server. One such command will trigger the aforementioned spreading.
Can perform DDoS attacking with sync, ping, or UDP packets.
Calculates a random IP address to infect for a computer to infect.
Attempts to authenticate itself to the aforementioned, randomly generated IP addresses.
To remove it from startup use RegRun Startup Optimizer.
Removal: XBox64.exe is removed by RegRun.
Read more... Removal instructions...
Recommended software:
UnHackMe - easy removal Rootkits/Adware/Spyware.
http://www.unhackme.com
RegRun Security Suite - removal and protection.
http://www.regrun.com
RegRun Reanimator - free removal tool.
greatis.com/reanimator
RegRun - User's Choice
Vista Programs - full info...
What is hidden in MSDN?
.NET Secrets Revealed
Why software developers prefer Win32.FreeTechSecrets.com?
All Unix Manuals in Alphabetical Order
C# controls for .NET in 3 simple steps.
Constantly updated. Last update:
May 12 2008
Interesting information about Vista programs...
Need consultation?
Would you like to add your opinion?