WORM_PALEVO.KK
WORM_PALEVO.KK is a worm that can be unknowingly downloaded from malicious websites. WORM_PALEVO.KK can also spread via removable drives, MSN Messenger and P2P applications. When inside a PC, WORM_PALEVO.KK will drop copies of itself, create folders and create a registry entry that will enable its automatic execution at each system start-up. WORM_PALEVO.KK able to perform Denial of Service attacks using SYN flooding. WORM_PALEVO.KK is a harmful computer parasite that should be removed upon detection.
File System Details
WORM_PALEVO.KK may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %User Temp%\setup32temp.exe | |
| 2. | %System Root%\RECYCLER\{SID}\recycle.exe | |
| 3. | %System Root%\RECYCLER\{SID}\Desktop.ini | |
| 4. | %System Root%\RECYCLER\{SID} | |
| 5. | %System Root%\RECYCLER | |
| 6. | {drive letter}:\U3ROM\Desktop.ini |
Registry Details
WORM_PALEVO.KK may create the following registry entry or registry entries:
Windows NT\CurrentVersion\Winlogon = "Taskman = "%System Root%\RECYCLER\{SID}\recycle.exe""
HKEY_LOCAL_MACHINE\Software\Microsoft\
