Home Malware Programs Worms WORM_PALEVO.AZA

WORM_PALEVO.AZA

Posted: May 25, 2010

WORM_PALEVO.AZA is a malicious computer worm that drops its corrupt executable files on the targeted computer. WORM_PALEVO.AZA propagates via instant messaging programs like Skype and Yahoo Messenger. WORM_PALEVO.AZA creates its own registry entries to execute itself automatically when computer is started. Remove WORM_PALEVO.AZA before it causes chaos on your operating system.

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\HKEY_LOCAL_MACHINE\Software\Microsoft\Install\Software\Microsoft\HKEY..\..\..\..{RegistryKeys}Firewall Administrating = "%Windows%\infocard.exe"Windows NT\CurrentVersion\Terminal Server\Windows\CurrentVersion\Run
Loading...