W32/Skuffbot-A

Category: Viruses and Spyware Protection available since:26 Jul 2013 19:42:32 (GMT)
Type: Win32 worm Last Updated:26 Jul 2013 19:42:32 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

W32/Skuffbot-A exhibits the following characteristics:

File Information

File type
Windows executable

Other vendor detection

Avira
WORM/Rbot.Gen

Runtime Analysis

Copies Itself To
  • c:\Documents and Settings\test user\Application Data\svchosts.exe
Registry Keys Created
  • HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    Microsoft Corp
    c:\Documents and Settings\test user\Application Data\svchosts.exe
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Run
    Microsoft Corp
    c:\Documents and Settings\test user\Application Data\svchosts.exe
  • HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run
    Microsoft Corp
    c:\Documents and Settings\test user\Application Data\svchosts.exe
Processes Created
  • c:\Documents and Settings\test user\application data\svchosts.exe
DNS Requests
  • x01bkr2.biz
  • xeyaz.biz
  • xkzykxb.biz
  • zr0x1b9.biz

download Try Sophos products for free
Download now