W32/Spenser-A

Category: Viruses and Spyware Protection available since:17 Jun 2009 05:34:30 (GMT)
Type: Win32 worm Last Updated:10 May 2011 14:22:08 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

W32/Spenser-A is a removable-media worm for the Windows platform.

When run the worm will copy itself to <System>\Spenser.exe and modify the following registry entry to auto-start.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Userinit

download Try Sophos products for free
Download now