1. Symantec/
  2. Security Response/
  3. Attack Signatures/
  4. System Infected: W32.Qakbot Activity 13

System Infected: W32.Qakbot Activity 13

Severity: High

This attack could pose a serious security threat. You should take immediate action to stop any damage or prevent further damage from happening.

Description

This signature detects a web pages associated with malicious, encoded content and result in file downloads to additionally compromise the target host.

Additional Information

This signature detects a web page which is typically associated with malicious content. This content may result in the download of file which may compromise the target host.

Affected

  • Windows 2000, Windows Server 2003, Windows Vista, Windows XP

Response

1. Update the definitions.
2. Run a full system scan.
3. Delete any values added to the registry.
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube