Home Malware Programs Worms Email-Worm.Win32.Iksmas.frg

Email-Worm.Win32.Iksmas.frg

Posted: November 11, 2009

Email-Worm.Win32.Iksmas.frg is a dangerous computer Worm that attempts to replicate across any existing network it gains entry to. Email-Worm.Win32.Iksmas.frg has the capability to send out email messages via a built-in SMTP client engine. Email-Worm.Win32.Iksmas.frg contains characteristics of a Waledac Worm that spreads by sending malicious emails containing links to copies of itself. Email-Worm.Win32.Iksmas.frg also creates a startup registry entry and can produces outbound traffic. Email-Worm.Win32.Iksmas.frg contains all the characteristics of an identified security risk and should be removed from the infected system immediately.

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion][HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion]HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
Loading...