Tanexor is a worm that spreads through removable media. Once executed, the parasite secretly installs itself to the system and runs a payload. It terminates running processes of some antiviruses and security-related applications. It also opens a back door providing the attacker with unauthorized remote access to the compromised computer. The intruder can download arbitrary files and attack remote hosts. Tanexor is able to bypass the Windows Firewall. It runs as a service on every Windows startup.