The Web    Google
6/7: Spybot-BZ Copies Itself to Folder

6/7: Spybot-BZ Copies Itself to Folder
June 7, 2004

W32/Spybot-BZ attempts to copy itself to CRCSSV.EXE in the Windows system folder. It creates entries in the registry at the following locations to run itself on system restart:


W32/Spybot-BZ copies itself to a folder called BACKUPS in the Windows system folder with the following filenames:


W32/Spybot-BZ then sets the following registry entry to enable sharing of these files with KaZaA:


More information is at Sophos page.

  • Sony Bundles Backup and Disaster Recovery Solutions
  • 4/27: Mytob-CY Worm Arrives as Email Attachment
  • Group Revises Anti-Piracy License Terms
  • 3/31: MyDoom-AI Worm Uses Email
  • FTC: Identity Theft, Fraud on the Rise
  • AutoCert Automates Certificate Renewal
  • XP SP2 Deadline Extended
  • 2/17: Poebot-A Worm Has Backdoor Functions
  • How to Protect Against Identity Theft
  • 8/20: Rbot-GS Exploits Vulnerabilities
  • 10/1: Spybot-EAS Remotely Controlled
  • Computer security background information