Virus:TR/Spy.ZBot.ajvf
Date discovered:01/06/2010
Type:Trojan
In the wild:Yes
Reported Infections:Low to medium
Distribution Potential:Low
Damage Potential:Low
Static file:Yes
File size:37.888 Bytes
MD5 checksum:396105d2b2016e5f07a87e8de3f419d8
IVDF version:7.10.07.206 - Tuesday, June 1, 2010

 General Aliases:
   •  Bitdefender: Trojan.Generic.4163895
   •  Panda: Trj/Sinowal.DW
   •  Eset: Win32/Delf.PGC


Platforms / OS:
   • Windows 2000
   • Windows XP
   • Windows 2003


Side effects:
   • Drops malicious files

 Files It copies itself to the following location:
   • %SYSDIR%\svchost.exe




It tries to executes the following file:

– Filename:
   • "%SYSDIR%\svchost.exe" /start

Description inserted by Petre Galan on Tuesday, August 24, 2010
Description updated by Petre Galan on Tuesday, August 24, 2010

Back . . . .