W32/Waled-B

Category: Viruses and Spyware Protection available since:26 Dec 2008 14:34:53 (GMT)
Type: Win32 worm Last Updated:26 Dec 2008 14:34:53 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

W32/Waled-B is a worm for the Windows platform.

W32/Waled-B includes functionality to access the internet and communicate with a remote server via HTTP and send itself out using built-in SMTP client.

The worm creates the following registry values to run itself on Windows startup:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\PromoReg
<path of worm>

The worm sets registry entry under:

HKCU\Software\Microsoft\Windows\CurrentVersion\RList
 
HKCU\Software\Microsoft\Windows\CurrentVersion\MyID


 

download Try Sophos products for free
Download now