Home Malware Programs Worms W32.Spamuzle.E

W32.Spamuzle.E

Posted: February 25, 2009

W32.Spamuzle.E is a worm known to propagate itself through a network by sending copies of itself to other computers without your intervention. In addition, W32.Spamuzle.E may attack your computer by stealing personal data, duplicating itself and may even download additional parasites from a remote server. W32.Spamuzle.E also has rootkit capabilities that allows it to hide the presence of its files on the infected computer.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %System%\[RANDOM CHARACTERS].dll
    2 %System%\trash[RANDOM CHARACTERS]

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Command Processor\"RunOnce" = "[RANDOM CHARACTERS]"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Command Processor\1\[RANDOM CHARACTERS]
Loading...