W32/Deletemusic is a worm. The worm will infect Windows systems.

The worm will arrive as a dropped file of another malware or may be downloaded from the Internet.

Upon execution, the worm copies itself as logon.bat and csrss.exe in the System folder, arena.exe in the windows folder.

The worm modifies registry at the following location to load itself during each startup:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce

It also copies csrss.exe and autorun.inf in the removable drives.

The worm is capable of delete mp3 files on all drives.

This worm first appeared on July 30, 2007.

 Other names of W32/Deletemusic Worm:

This Worm is also known as W32.Deletemusic.