Home Malware Programs Worms W32.HLLW.Caspid

W32.HLLW.Caspid

Posted: March 28, 2006

W32.HLLW.Caspid is a worm that spreads through file-sharing networks, such as Morpheus and KaZaA. It is a virus that infects HTML files. This worm may also spread through email by setting itself as the default stationery used in email messages.
The indication of infection is the existence of Capside.exe or Capside.htm files.

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}Browsetothekey:HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun
Loading...