Home Malware Programs Worms Appflet

Appflet

Posted: March 28, 2006

Appflet is a rapidly spreading Internet worm, which propagates by e-mail in messages with attached archives containing infected executables. Once the user unpacks and runs such a file, the spyware shows the following fake error message:

File System Modifications

  • The following files were created in the system:
    # File Name
    1 actorsgallery.zip
    2 installgallery.exe
    3 syspw32.exe
    4 winpw32.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CLASSES_ROOTexefileShellOpenCommand(Default)=%Windir%Systemwinpw32.exe%1%*HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun
Loading...