Welcome to the Virus Encyclopedia of Panda Security.
|Effects: ||It ends processes belonging to antivirus programs, firewalls and system monitoring tools, among others. It disables the Windows Registry editing tools.|
|First detected on:||Feb. 21, 2004|
|Detection updated on:||Oct. 13, 2004|
|Yes, using TruPrevent Technologies
|Country of origin:||PERU|
Darby.D is a worm that spreads via e-mail and through peer-to-peer (P2P) file sharing programs.
Darby.D searches the memory for active processes belonging to antivirus programs, firewalls and system monitoring tools, among others, and ends them. This leaves the computer vulnerable to the attack of other viruses, worms, Trojans, etc.
In addition, Darby.D disables the tools that allow to edit the Windows Registry.
Darby.D is easy to recognize, as it displays the following message on screen when it is run:
In addition, its icon has the same appearance as a Windows folder, in order to trick the user into thinking that it is harmless.