W32/Puress-B

Category:	Viruses and Spyware	Protection available since:	27 Jun 2008 19:58:29 (GMT)
Type:	Win32 worm	Last Updated:	27 Jun 2008 19:58:29 (GMT)
Prevalence:

Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Summary
More information

W32/Puress-B copies itself to <Windows>\system\svchost.exe and <Windows>\system\dumprep.exe.

W32/Puress-B drops the file autorun.inf which is detected as Mal/AutoInf-A.

W32/Puress-B creates the registry values

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
PHIME2002A
<Windows>\System\svchost.exe

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
PHIME2002ASync
<Windows>\System\dumprep.exe

Try Sophos products for free
Download now

W32/Puress-B

Free Mac Anti-Virus

Popular topics