TR/Scar.acpc - Trojan

See also

Full description

Virus:	TR/Scar.acpc
Date discovered:	15/10/2009
Type:	Trojan
In the wild:	Yes
Reported Infections:	Low
Distribution Potential:	Low
Damage Potential:	Low
Static file:	Yes
File size:	64.512 Bytes
MD5 checksum:	eb6f51f48ea429a9966c60ac2975aa31
IVDF version:	7.01.06.114

General Aliases:
   • Mcafee: W32/Koobface.worm.gen.o
   • Panda: W32/Koobface.FL.worm
   • Eset: Win32/Koobface.NBH
   • Bitdefender: Worm.Generic.93883

Platforms / OS:
   • Windows 2000
   • Windows XP
   • Windows 2003

Side effects:
   • Drops malicious files
   • Registry modification

Files It copies itself to the following location:
• %WINDIR%\pp12.exe

It deletes the initially executed copy of itself.

The following file is created:

– %WINDIR%\fdgg34353edfgdfdf

Registry One of the following values is added in order to run the process after reboot:

– [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
• "pp"="%WINDIR%\pp12.exe"

File details Runtime packer:
In order to aggravate detection and reduce size of the file it is packed with a runtime packer.

See a brief description here.

Inserted by Petre Galan on Wed, 24 Feb 2010 06:26 (GMT+1)
Updated by Petre Galan on Wed, 24 Feb 2010 06:30 (GMT+1)

« Back

TR/Scar.acpc - Trojan

Latest News