Home Malware Programs Worms Worm.Skopvel

Worm.Skopvel

Posted: May 6, 2011

Worm.Skopvel is a self-replicating computer worm which circulates from one computer to another in various ways, most frequently through removable media, such as external hard drives and flash drives. Worm.Skopvel also changes the Windows Hosts file to disable accessing certain security-related websites. Worm.Skopvel was ultimately created to collect personal information from the victim's computer system, such as credit card numbers, personal identity information, etc.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %PROGRAM_FILES%\ Worm.Skopvel\ Worm.Skopvel

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\Software\ Worm.Skopvel
Loading...