Computer Worms – Faizal.JS

Faizal is a computer worm based on Javascript. It will attempt to copy itself to all drives on your computer after successful infection.  The best means to prevent infection by the Faizal javascript worm is to run up-to-date antivirus and antispyware protection on your computer.How the Faizal.JS Computer Worm Infects Your Computer?

Faizal can spread to your computer through a number of methods. The majority of antivirus programs will detect the worm if left activated and updated. If you do not run active computer security protection, it can spread through opening infected media files, as a payload of a Trojan virus, or through visiting malicious websites.

Faizal.JS Computer Worm MalwarePayload

Once the Faizal worm has infected your computer, it will create the following file: %System%\faizal.js. It will then modify your registry so that it will run when you restart your computer. After this phase of the infection is complete, Faizal will then attempt to copy itself to all drives connected to your computer.
Faizal.JS Computer Worm Malware Processes and Files

The registry entry made by Faizal to run on Windows restarting is:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\”faizal” = “wscript.exe C:\WINDOWS\system32\faizal.js”

Faizal will also make the following registry entries or modifications on your computer:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WinLogon\”LegalNoticeCaption” = “FAIZAL”