W32.Quaters.A is a low-risk self-spreading computer infection
W32.Quaters.A is a computer worm designed for Windows operating systems. It seems like this parasite was mainly created to spread a message about allegedly incorrectly spent taxpayer money in the United Kingdom. The worm infects various files on the hot system and sends out the Distributed Denial of Service (DDoS) attacks against the www.number-10.gov.uk website.
| Name | W32.Quaters.A |
| Type | Computer worm, malware |
| Function | Uses the list of Outlook addresses to email itself to potential victims; launches DDoS attacks against particular targets |
| Distribution | Microsoft Outlook self-mail, IRC networks |
| Removal | Scan your machine with powerful anti-malware – we recommend using SpyHunterCombo Cleaner |
| System fix | If you have noticed that your system is crashing, lagging or suffering from similar stability issues, use FortectIntego to repair corrupted files automatically |
This mass-mailing worm spreads itself through Microsoft Outlook and IRC networks. The infected computer checks the list of the emails within the Outlook app and sends the malicious spam to those addresses. There are several different (randomly chosen) subject lines that are used in the phishing email, for example:
- Email Account Information.
- Account Billing Information.
- Your Account is on hold.
- ORDER CONFIRMATION:
- Your Account has been suspended, etc.
Clipped to the email message which talks about allegedly suspended account or similar fake issues, is what it seems to be a DOC file. However, it is poorly obfuscated, as the extension .EXE is still visible at the end. Executables in emails are particularly dangerous as they are likely to download and install a malicious payload on the system automatically.
Possibly the most notorious aspect of this worm is that it targeted Tony Blair's website back in 2003. Those infected would see a suspicious popup message titled “Infected by the WIN32.SORT-IT-OUT-BLAIR Virus!” that would display a message directed to Tony Blair. Apparently, the attackers were not happy that the money is spent “on immigrants” rather than the NHS.
If you see such messages on your screen, delete the W32.Quaters.A virus with SpyHunterCombo Cleaner or another reputable anti-malware. To fix system damage automatically, use FortectIntego.
Did this guide help?
Be the first to comment