Skip to main content

Worm:W32/Voter

Classification

Category:

Malware

Type:

Worm

Aliases:

  • Worm:W32/Voter.A
  • Worm:W32/Voter.B
  • Worm:W32/Voter.C
  • Worm:W32/Voter.D
  • Worm:W32/Voter.E
  • W32/Voterai.worm
  • W32/Voterai.worm.b
  • TROJ_VOTERAI.A
  • Trojan.NSIS.Voter.a

Summary

Worm:W32/Voter is a small family of worms distributed in a small executable PE file, most notable for using a GIF image of an African political figure as a decoy to hide its infection activities.

Removal

Technical Details

The Voter family of worms was first discovered in 2007; subsequently, variants with (very few differing characteristics) have occassionally appeared in the following years.

Distribution

Voter worm variants are distributed via small, executable PE files and must be manually executed by the user to infect the system. The name of the file may vary, but samples observed have been named 'Raila Odinga.exe'.

Infection

On arriving on a new system, the worm will typically drop a GIF file containing an image of an African political figure to the desktop, which is used as a decoy to obscure the worm's infection actions.

While the image is being displayed, the executable file copies itself to the windows directory.

Protect your devices from malware with F‑Secure Total

Protecting your devices from malicious software is essential for maintaining online security. F‑Secure Total makes this easy, helping you to secure your devices in a brilliantly simple way.

  • Award‑winning antivirus and malware protection

  • Online browsing, banking, and shopping protection

  • 24/7 online identity and data breach monitoring

  • Unlimited VPN service to safe­guard your privacy

  • Password manager with private data protection

Choose how many devices you want to protect to get started.

  • Free customer support

  • Cancel anytime

  • The trial does not obligate you to buy the product

After 30 days your subscription will renew automatically for one year at €69.99.

More Support

Community

Ask questions in our Community.

User guides

Check the user guide for instructions.

Contact Support

Chat with with or call an agent.

Submit a Sample

Submit a file or URL for analysis.