W32/Tigs.A is a worm. The worm will infect Windows systems. The worm spreads through shared network drives.

Upon execution, the worm copies itself as taskmgr.exe in Windows folder.

The worm modifies registry at the following location to load itself during each startup.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

It also drops the following files.

Adobe Photoshop 10 crack.exe, Clone DVD 6.exe , Microsoft WinXP Crack full.exe, XXX hardcore pics.jpg.exe, counterstrike cd keygen.exe and windows xp antispy.exe in c:\Program files\Common files\Microsoft shared folder.

nbelieveable.exe and funny.exe in in c:\Dokumente und Einstellungen\All Users\Dokumente folder.

Adobe Photoshop 10 crack.exe, Clone DVD 6.exe, Microsoft WinXP Crack full.exe, XXX hardcore pics.jpg.exe, counterstrike cd keygen.exe and windows xp antispy.exe in c:\shared folder.

This worm attempts to copy itself to A: and G: drives.

This worm first appeared on June 06, 2006.

 Other names of W32/Tigs.A Worm:

This Worm is also known as W32/Tigs.worm, W32/Tigs-D, Worm.Win32.Agent.g, Trojan.Agent.Tigs.E .