Virus Name: W32.Cazdeg.D

Aliases: VBS/Cazdeg-D, Win32/Gedza.A, VBS/Gedza, VBS.Gaggle.E@mm, Email-Worm.VBS.Gedza

Cazdeg is a Windows virus, which infects visual basic scripts, java scripts, zip files, html files, and Microsoft Word and Excel files. It attempts to spread to other computers using peer-to-peer networks by copying itself into their shared folders using enticing file names. Cazdeg also attempts to spread to other network shares protected by poor passwords.

Cazdeg creates pkzip.exe and AvrilLavigne.jpg as well as several other files on the infected computer. Cazdeg then installs an IRC backdoor and creates several different registry keys. The backdoor surreptitiously downloads and installs software and other programs. And Cazdeg is re-run on start-up each time due to the registry keys.

Privacy	Copyright	About
Contact	Site Map	Blog Frog