Threat Database Worms WORM/Nyxem.BK.worm

WORM/Nyxem.BK.worm

By GoldSparrow in Worms

Threat Scorecard

Threat Level: 50 % (Medium)
Infected Computers: 61
First Seen: October 13, 2011
Last Seen: December 23, 2020
OS(es) Affected: Windows

WORM/Nyxem.BK.worm is a dangerous mass-mailing worm which can gather and forward your email address book to an email spammer and send unexpected email messages from your PC without your knowledge. WORM/Nyxem.BK.worm can use a large amount of your system resources to trace your online activities or distribute pop-up ads that may notably slow down the PC or make it crash randomly. WORM/Nyxem.BK.worm may record and reset your account settings or change your default homepage to a different one and not allow you to change it back. Also, WORM/Nyxem.BK.worm can add new desktop items or toolbars to Internet Explorer without your knowledge. Delete WORM/Nyxem.BK.worm before it harms your PC.

File System Details

WORM/Nyxem.BK.worm may create the following file(s):
# File Name Detections
1. setupapp7070010000.exe
2. %UserProfile%\Local Settings\Temp\kjkkklklj.bat

Registry Details

WORM/Nyxem.BK.worm may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings 'ProxyServer' = 'http=127.0.0.1:5555'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run 'Protection Center'v
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations 'LowRiskFileTypes' = '.exe'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce 'SelfdelNT'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run 'Protection Center'
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download 'RunInvalidSignatures' ='1'
HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\SimpleShlExt

Trending

Most Viewed

Loading...