high
Summary
Summary
Action- More Information
| Detected by | All Sophos products |
|---|---|
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Please follow the instructions for removing worms.
Please follow the instructions for removing worms.
More Information
W32/Sachiel-D is a worm that spreads by copying itself to other drives.
W32/Sachiel-D copies itself to the Windows\System folder as Helpdks.dll and Winrun.sys.pif and to the Windows\Help folder as Sachiel.sys.bat.
The following registry entries are created which automatically execute Winrun.sys.pif and Sachiel.sys.bat on startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Mmsystem HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Thsys
W32/Sachiel-D deletes Regedit.exe, Msconfig.exe and Sfc.exe from the Windows and Windows\System folders.
|
