W32/Dorkbot-ID

Category: Viruses and Spyware Protection available since:23 Jul 2013 14:09:53 (GMT)
Type: Win32 worm Last Updated:23 Jul 2013 14:09:53 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

W32/Dorkbot-ID exhibits the following characteristics:

File Information

File type
Windows executable

Runtime Analysis

Registry Keys Created
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Run
    Screen Saver Pro 3.1
    c:\Documents and Settings\test user\Application Data\ScreenSaverPro.scr
Processes Created
  • c:\windows\system32\mspaint.exe
  • c:\windows\system32\svchost.exe
HTTP Requests
  • http://api.wipmania.com/
DNS Requests
  • api.wipmania.com
  • e.balkrev.com
  • e.joyyven.com
  • e.lartanato.com

download Try Sophos products for free
Download now