Troj/VB-HCB

Category: Viruses and Spyware Protection available since:15 Feb 2014 22:58:56 (GMT)
Type: Trojan Last Updated:15 Feb 2014 22:58:56 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/VB-HCB exhibits the following characteristics:

File Information

Size
120K
SHA-1
d96a841dcf16057b2e449c1231d288d0d77b2b81
MD5
8276fe6d192021f75e8ded5119ee69c2
CRC-32
4bab0863
File type
Windows executable
First seen
2011-07-04

Runtime Analysis

Registry Keys Created
  • HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
    NoAutoUpdate
    0x00000001
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Run
    qaeka
    c:\Documents and Settings\test user\qaeka.exe /n
Registry Keys Modified
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
    ShowSuperHidden
    0x00000000
DNS Requests
  • ns1.backdates1.com
  • ns1.backdates1.net
  • ns1.backdates10.com
  • ns1.backdates16.com
  • ns1.backdates17.com
  • ns1.backdates2.com
  • ns1.backdates2.net
  • ns1.backdates3.net
  • ns1.backdates4.com
  • ns1.backdates5.com
  • ns1.backdates8.com
  • ns1.backdates9.com

download Try Sophos products for free
Download now