As with most worms, this one spreads by copying itself to drives and removable drives on the infected computer.

On infected computers, the worm will copy itself to the system directory as “winjpg.jpg”.  It will also create autorun.inf files as well as dropping a back door executable program.

Various registry keys will also be created to startup the backdoor program and to lower security settings on the infected computer. Once infected, there will be the ability to download further malware via the backdoor, as well as stealing confidential data.

Scan and Remove Runauto Worm – Free Download

As with most worms, it attempts to spread from computer to computer and infects each PC along the way. Qakbot can spread via network shares and other shared folders/drives on a network.

Once Qakbot infects a PC, it can steal private data from the computer, it can open a backdoor and download further harmful malware and files to the infected computer.

As well as downloading files to an infected computer, Qakbot will also add registry entries to run the files on startup.

As with many worms and trojans, you may be completely unaware of infection. These programs may then download more dangerous malware to your computer such as keyloggers, so always scan your PC on a regular basis.

Scan and Remove Qakbot Worm – Free Download