W32.Kergez.C@mm is a mass-mailing worm that sends itself to all the email addresses it finds in the following files:
- Files with the *.php, *.asp, *.htm* extensions.
- Files located in any of the directories specified in the registry key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders>
The email messages will have the following characteristics:
: Re: New Security Vuln.
W32.Kergez.C@mm is written in Microsoft Visual C++ and is UPX-packed.
Click for a more detailed description of Rapid Release and Daily Certified virus definitions.