Welcome to the Virus Encyclopedia of Panda Security.
|Alias:||Worm.Win32.Warpigs, W32/Warpi.worm.gen, W32.HLLW.Warpigs, W32/Warpi.worm.b, W32HLLW.Warpigs.b|
|Effects: ||It allows an attacking user to remotely control the affected computer. It ends Windows processes.|
|First detected on:||July 19, 2003|
|Detection updated on:||March 16, 2005|
|Yes, using TruPrevent Technologies
Warpi is a worm with backdoor characteristics that spreads across computer networks. Warpi attempts to connect to the network shared resources by using passwords that are typical or easy to guess. Once it is connected, Warpi remotely copies and runs itself in other computers.
Warpi connects to a specific IRC server, joins a certain channel and waits for instructions. The attacking user can perform the following actions, among others: obtain information on the system, obtain the passwords stored in the cache memory, end active processes, delete files and directories, carry out denial of service (DoS) attacks, etc.
Warpi is not easy to recognize, as it does not show any messages or warnings that may indicate that it has reached the computer.