W32/Stration-AG is a worm for the Windows platform.
W32/Stration-AG may spread by email.
W32/Stration-AG includes functionality to access the internet and communicate with a remote server via HTTP.
When W32/Stration-AG is installed the following files are created:
<Windows system folder>\iuennwcf.dll
<Windows system folder>\kbdfwshe.exe
<Windows system folder>\w3sskbda.dll
These files are all detected as components of W32/Stration-AG.
The following registry entry is created in order to run w3sskbda.dll on startup:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
AppInit_DLLs
w3sskbda.dll