Svich
Svich is a very dangerous computer worm. Svich may be spread through removable media such as USB drives or through Yahoo instant messenger. Svich is known to hijack the Yahoo instant messenger program to send spam messages with links to a users' contacts.
Svich is able to block task manager and load at startup of Windows which makes it near impossible to manually remove. Svich has also been known to download and install other malware without warning to the computer user. It is suggested that a spyware removal tool be used to detect and rid a system of the Svich worm.
File System Details
Svich may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %Windir%\system3_.exe | |
| 2. | %Windir%\Tasks\At1.job | |
| 3. | %System%\autorun.ini |
Registry Details
Svich may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main
