Scold

By Sumo3000 in Worms

Scold is a mass-mailing worm that doesn't actually infect or delete any files once it has infiltrated a system. Scold spreads in the form of an email attachment that usually has a .SCR extension; however Scold does not drop any harmful payload. Scold is executed when a user clicks on the attachment. Once executed, Scold may present a user with a picture then proceed to surreptitiously gather email addresses from the victim's e-mail contact list.

Scold will then use the Microsoft Outlook mailing program to send itself to all the addresses it gathered from the victim's contact list. Scold also adds itself to the system registry to ensure that it is run whenever the compromised system is rebooted. Scold can be manually removed or automatically removed with an anti-spyware application.

File System Details

Scold may create the following file(s):
# File Name Detections
1. warm.scr

Registry Details

Scold may create the following registry entry or registry entries:
"ExeName32"=C:\Windows\warm.scr
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Trending

Most Viewed

Loading...