Virus:SPR/Fake.Syscontrol
Type:Security Privacy Risk
In the wild:No
Reported Infections:Medium to high
Distribution Potential:Low
Damage Potential:Low to medium
Static file:Yes
File size:195.616 Bytes
MD5 checksum:f9be49d2313f3e92b0f9f6a2b83029ea
VDF version:7.00.00.167
IVDF version:7.00.00.174 - Monday, November 5, 2007

 General Platforms / OS:
   • Windows 95
   • Windows 98
   • Windows 98 SE
   • Windows NT
   • Windows ME
   • Windows 2000
   • Windows XP
   • Windows 2003
   • Windows CE


Side effects:
   • Downloads a malicious file
   • Drops files

 Files The following files are created:

– %tempdir%\NI.UGES_0001_N122M2610\settings.ini
– %tempdir%\NI.UGES_0001_N122M2610\setup.len



It tries to download a file:

– The location is the following:
   • http://bsa.safetydownload.com/******
It is saved on the local hard drive under: %tempdir%\NI.UGES_0001_N122M2610\setup.exe Furthermore this file gets executed after it was fully downloaded. Further investigation pointed out that this file is malware, too.

Description inserted by Irina Diaconescu on Thursday, April 24, 2008
Description updated by Irina Diaconescu on Thursday, April 24, 2008

Back . . . .