Need help? Ask the community or hire an expert.
Go to Avira Answers
Date discovered:27/11/2007
In the wild:Yes
Reported Infections:Low
Distribution Potential:Low
Damage Potential:Low
Static file:No
IVDF version:

 General Method of propagation:
   • No own spreading routine

Platforms / OS:
   • Windows 95
   • Windows 98
   • Windows 98 SE
   • Windows NT
   • Windows ME
   • Windows 2000
   • Windows XP
   • Windows 2003

Side effects:
   • Drops a file
   • Drops a malicious file

 Files The following files are created:

%PROGRAM FILES%\Internet Explorer\svchost.exe Furthermore it gets executed after it was fully created. Further investigation pointed out that this file is malware, too.
%PROGRAM FILES%\Internet Explorer\keymaker.exe

Description inserted by Alexander Neth on Monday, March 3, 2008
Description updated by Alexander Neth on Tuesday, March 4, 2008

Back . . . .