Home Malware Programs Worms Email-Worm.Nyxem

Email-Worm.Nyxem

Posted: April 23, 2010

Email-Worm.Nyxem is a malicious worm which propagates via email. It arrives as a downloaded file when a user unwittingly visits a compromised web server. Email-Worm.Nyxem poses a severe security threat and will affect system performance. Remove Email-Worm.Nyxem before it creates chaos on your computer.

Aliases

Generic.dx!ul (McAfee)
Mal/Generic-A (Sophos)
Win32/Nyxem.worm.62496 (AhnLab)

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\InprocServer32][HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\ToolboxBitmap32][HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}][HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{248DD897-BB45-11CF-9ABC-0080C7E7B78D}\InprocServer32][HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{248DD890-BB45-11CF-9ABC-0080C7E7B78D}\1.0\0\win32][HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{248DD890-BB45-11CF-9ABC-0080C7E7B78D}\1.0\HELPDIR]
Loading...