Troj/VB-GNQ

Category: Viruses and Spyware Protection available since:30 Apr 2013 06:23:02 (GMT)
Type: Trojan Last Updated:30 Apr 2013 06:23:02 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Examples of Troj/VB-GNQ include:

Example 1

File Information

Size
92K
SHA-1
c942e02f26de685f1a3441a6811d4b7fb4905a41
MD5
1ccb34ebc469a18712ff6a5949f5bd0e
CRC-32
274a6d63
File type
Windows executable
First seen
2010-09-18

Runtime Analysis

Copies Itself To
  • C:\WINDOWS\system32\WinDefend.exe
  • c:\Documents and Settings\test user\Application Data\.exe
Registry Keys Created
  • HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    sample
    c:\Documents and Settings\test user\application data\.exe
Processes Created
  • c:\windows\system32\windefend.exe

Example 2

File Information

File type
Windows executable

Example 3

File Information

Size
6.1M
SHA-1
ce5cd9333dd2ddb80b873183dbb96d9aba51beb2
MD5
fb0dbb880719d843348dc6dcbd6d227f
CRC-32
87be1c84
File type
Windows executable
First seen
2012-11-13

download Try Sophos products for free
Download now