"More details on I-Worm.Kiray"

22 Oct 2001
Virus News

This is a worm virus that spreads via the Internet using Microsoft Outlook. The worm appears as an email message with the attached file Kiray.EXE.

When the EXE-file is run the worm modify some of the keys in the system registry:

HKCR\exefile\shell\open\command\
""="c:\windows\temp\Kiray.exe"

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\
NoDesktop=1
NoDrives=1

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network\
NoNetSetup=1

Details ...