high
Summary
Summary
Action- More Information
| How it spreads |
|
|---|---|
| Affected operating systems | Windows |
| Included in our products from | May 2008 (4.29) |
| Protection available since | 22 March 2008 20:18:03 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for removing worms.
More Information
W32/Zaap-A is a worm for the Windows platform.
W32/Zaap-A spreads by copying itself to removable drives, with the name protector.exe.
When first run, the worm copies itself to C:\ntkrnl.exe and creates the following registry entry in order to be run automatically.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
ntoskrnl
C:\ntoskrnl.exe
|
