Home Malware Programs Worms W32.Scrshotvid

W32.Scrshotvid

Posted: March 3, 2010

W32.Scrshotvid is a malicious computer worm that may enter the system pretending to be a legitimate and virus-free program. W32.Scrshotvid spreads by copying itself to mapped networks and removable USB drives. Some of its functions include capturing screenshot images, logging keystrokes and downloading malicious files onto the system. Remove W32.Scrshotvid using a proven malware remover before it wreaks havoc on your computer or network.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %DriveLetter%\autorun.inf
    2 %DriveLetter%\imagem.exe
    3 %System%\msnmsg.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\Run\"Msnmsg" = "%System%\msnmsg.exe"
Loading...