VIRUS-W32/Cep Worm
in
W32/Cep is a worm. The worm will infect Windows systems and spreads through removable drives.
The worm will arrive as a dropped file from the network or removable drive.
Upon execution, the worm copies itself as msmsgs.exe in the Windows folder and drops sysdeb.ini in the Windows folder, windll.exe in the %UserProfile%\Local Settings\Temp folder, explorer.exe in the System folder.
The worm modifies registry at the following location to load itself during each startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
It also copies autorun.exe, desktop.ini and autorun.inf in the removable drives.
This worm first appeared on September 27, 2007.
- pankaj's blog
- Add new comment
- 557 reads
- Email this page
