New Worm

Sophos has posted a new blog entry yesterday about another worm that they have discovered. This worm spreads itself to removable storage devices. One of the things that this worm do is that it creates an autorun.inf file which runs when the device connects to a computer.

It also “redirects” regedit.exe’s and taskmgr.exe execution to different games. This process was made by creating two registry keys and the link in the source article below shows where they are stored.

Sol.exe and spider.exe were executed if a user tries to open Regedit or Task Manager.

Source: Sophos