Home Malware Programs Trojans W32.Galil.C

W32.Galil.C

Posted: March 28, 2006

W32.Galil.C@mm is a mass-mailing worm that sends itself to the email addresses it finds in the files that have the .htm, .html, .eml, and .txt file extensions. The email subject line and attachment name is many.
This worm sends itself to all the contacts in the Microsoft Outlook Address Book and MSN messenger contact list, and it attempts to spread itself through the KaZaA file-sharing network.

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}Browsetothekey:DeletethevalueExplore=%System%explore.exeDeletethevaluea.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun
Loading...