Alias:W32/Jeefo [McAfee], PE_JEEFO.A [Trend]
Type:Worm 
Size:36,352 Bytes 
Origin: 
Date:00-00-0000 
Damage:W32/Jeefo tries to infect PE files. 
VDF Version:  
Danger:Low 
Distribution:Low 

Technical DetailsWhen an W32/Jeefo infected file is opened, the file SVCHOST.EXE (36,352 Bytes) in %WinDIR% is created.

The following registry entry in startup system is made, on Windows 9x computers:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\_CurrentVersion\RunServices"PowerManager" = %WinDIR%\SVCHOST.EXE

On Windows NT/2000/XP the file is created with the following characteristics:

Description: Manages the power save features of the computer
Display Name: Power Manager Start
Type: Automatic
Account: Local system

When activated in computer memory, the virus tries to infect PE files.
Descrizione inserita da Crony Walker su martedì 15 giugno 2004

Indietro . . . .