W32/Waled-D

Category: Viruses and Spyware Protection available since:29 Dec 2008 19:24:48 (GMT)
Type: Win32 worm Last Updated:29 Dec 2008 19:24:48 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

W32/Waled-D is a worm for the Windows platform.

W32/Waled-D includes functionality to access the internet and communicate with a remote server via HTTP and send itself out using built-in SMTP client.

The worm creates the following registry values to run itself on Windows startup:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\PromoReg
<path of worm>

The worm sets registry entry under:

HKCU\Software\Microsoft\Windows\CurrentVersion\RList
 
HKCU\Software\Microsoft\Windows\CurrentVersion\MyID

download Try Sophos products for free
Download now