Home Malware Programs Worms Email-Worm.Win32.NetSky.x

Email-Worm.Win32.NetSky.x

Posted: December 11, 2009

Email-Worm.Win32.NetSky.x is a malicious computer worm which spreads via the Internet as an attachment to infected messages. Email-Worm.Win32.NetSky.x will intentionally send itself to email addresses harvested from the victim machine. Email-Worm.Win32.NetSky.x is activated once the user launches the attached file by clicking on the attachment. Email-Worm.Win32.NetSky.x will then install itself and start propagating. Stop Email-Worm.Win32.NetSky.x from spreading infections by removing it immediately.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Windir%\base64.tmp
    2 %Windir%\zip1.tmp
    3 %Windir%\zip2.tmp
    4 %Windir%\zip3.tmp
    5 %Windir%\zip4.tmp
    6 %Windir%\zip5.tmp
    7 %Windir%\zip6.tmp
    8 %Windir%\zipped.tmp

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}[HKLM\Software\Microsoft\Windows\CurrentVersion\Run]
Loading...