Email-Worm.Nyxem propagates via unsolicited e-mails as an infected attachment. Email-Worm.Nyxem can also spread via open network sources. Once inside a PC, Email-Worm.Nyxem will send itself to the e-mail addresses it gathered from the victim computer. Email-Worm.Nyxem will also create a start-up registry entry to ensure that it is launched each time the system is started up.
Aliases
3 security vendors flagged this file as malicious.
Anti-Virus Software |
Detection |
- |
Win32/Nyxem.worm.62496 |
- |
Mal/Generic-A |
- |
Generic.dx!ul |
Registry Details
Email-Worm.Nyxem may create the following registry entry or registry entries:
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{248DD897-BB45-11CF-9ABC-0080C7E7B78D}\InprocServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{248DD890-BB45-11CF-9ABC-0080C7E7B78D}\1.0\0\win32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\InprocServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{248DD890-BB45-11CF-9ABC-0080C7E7B78D}\1.0\HELPDIR]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\ToolboxBitmap32]