W32.Changeup Description

W32.Changeup is a computer worm that may infect systems through visual basic instructions. W32.Changeup may also spread onto systems through a connected network, removable drive or the internet. W32.Changeup also has an autorun feature where it may load during startup of Windows. Malware files may be loaded onto a system through the dangerous functions of W32.Changeup.

Type: Worms

How Can You Detect W32.Changeup?

W32.Changeup Removal Details

W32.Changeup has typically the following processes in memory:

• %DriveLetter%\[CURRENT USER NAME].exe
• %UserProfile%\[CURRENT USER NAME].exe

W32.Changeup creates the following files in the system:

• %DriveLetter%\autorun.inf

W32.Changeup creates the following registry entries:

• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\”ShowSuperHidden” = “0″
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\”[CURRENT USER NAME]” = “%UserProfile%\[CURRENT USER NAME].exe”

Important Article Disclaimer