Virus: TR/Autoit.WM Date discovered: 20/01/2009 Type: Trojan In the wild: Yes Reported Infections: Low Distribution Potential: Low to medium Damage Potential: Medium Static file: Yes File size: 545.758 Bytes MD5 checksum: 123834811b7d6f9e1423f381e68d25a6 IVDF version: 7.01.01.152 - Tuesday, January 20, 2009
General Method of propagation: Aliases: Platforms / OS: Side effects: Files %SYSDIR% \csrcs.exe%SYSDIR% \%random character string% .exe%random character string% \%random character string% \%gathered from the internet% .exe%drive% \%random character string% .exe%random character string% \%random character string% \%gathered from the internet% .zip%SYSDIR% \autorun.in This is a non malicious text file with the following content:%code that runs malware% %SYSDIR% \autorun.i This is a non malicious text file with the following content:%code that runs malware% %drive% \autorun.inf This is a non malicious text file with the following content:%code that runs malware% %SYSDIR% \cftu.exe Furthermore this file gets executed after it was fully downloaded. Further investigation pointed out that this file is malware, too. %SYSDIR% \RegShellSM.exe Furthermore this file gets executed after it was fully downloaded. Further investigation pointed out that this file is malware, too. Registry %SYSDIR% \csrcs.exe"%SYSDIR% \csrcs.exe" Backdoor Contact server: File details Runtime packer:
Description inserted by Irina Diaconescu on Tuesday, October 26, 2010
Back
.
.
.
.
