Blackworm is also known as Grew.a, Grew.b, Blackmal.e, Nyxem.e, Nyxem.d, Mywife.d, Tearec.a and CME-24. It is an extremely dangerous and rapidly spreading Internet worm, which propagates by e-mail via messages with infected attachments and through unprotected network shares. The user can accidentally infect a computer by opening a malicious e-mail attachment or running an infected executable file.
movies.exenew winzip file.exerundll16.exescanregw.exeupdate.exewinzip.exewinzip_tmp.exezipped files.exe[X].exe
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunScanRegistryHKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerAdvancedShowSuperHidden=0HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerAdvancedWebView=0HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerCabinetStateFullPath=0HKEY_LOCAL_MACHINESOFTWAREClassesLicenses 96EFC40-6ABF-11CF-850C-08002B30345DHKEY_LOCAL_MACHINESOFTWAREClassesLicenses190B7910-992A-11CF-8AFA-00AA00C00905HKEY_LOCAL_MACHINESOFTWAREClassesLicenses2C49F800-C2DD-11CF-9AD6-0080C7E7B78DHKEY_LOCAL_MACHINESOFTWAREClassesLicenses4250E830-6AC2-11CF-8ADB-00AA00C00905HKEY_LOCAL_MACHINESOFTWAREClassesLicenses4D553650-6ABE-11CF-8ADB-00AA00C00905HKEY_LOCAL_MACHINESOFTWAREClassesLicenses556C75F1-EFBC-11CF-B9F3-00A0247033C4HKEY_LOCAL_MACHINESOFTWAREClassesLicenses57CBF9E0-6AA7-11CF-8ADB-00AA00C00905HKEY_LOCAL_MACHINESOFTWAREClassesLicenses5F54E750-CE26-11CF-8E43-00A0C911005AHKEY_LOCAL_MACHINESOFTWAREClassesLicenses6FB38640-6AC7-11CF-8ADB-00AA00C00905HKEY_LOCAL_MACHINESOFTWAREClassesLicenses72E67120-5959-11CF-91F6-C2863C385E30HKEY_LOCAL_MACHINESOFTWAREClassesLicenses78E1BDD1-9941-11CF-9756-00AA00C00908HKEY_LOCAL_MACHINESOFTWAREClassesLicenses7C35CA30-D112-11CF-8E72-00A0C90F26F8HKEY_LOCAL_MACHINESOFTWAREClassesLicenses899B3E80-6AC6-11CF-8ADB-00AA00C00905HKEY_LOCAL_MACHINESOFTWAREClassesLicenses9E799BF1-8817-11CF-958F-0020AFC28C3BHKEY_LOCAL_MACHINESOFTWAREClassesLicensesB1EFCCF0-6AC1-11CF-8ADB-00AA00C00905HKEY_LOCAL_MACHINESOFTWAREClassesLicensesBC96F860-9928-11CF-8AFA-00AA00C00905HKEY_LOCAL_MACHINESOFTWAREClassesLicensesDC4D7920-6AC8-11CF-8ADB-00AA00C00905HKEY_LOCAL_MACHINESOFTWAREClassesLicensesE32E2733-1BC5-11D0-B8C3-00A0C90DCA10HKEY_LOCAL_MACHINESOFTWAREClassesLicensesF4FC596D-DFFE-11CF-9551-00AA00A3DC45