W32/Stration-AP is a worm for the Windows platform.
W32/Stration-AP spreads via network shares and email messages.
W32/Stration-AP is a worm for the Windows platform.
W32/Stration-AP spreads via network shares and email messages.
When first run W32/Stration-AP creates the following files:
<System>\hotpmsta.exe - also detected as W32/Stration-AP
<System>\mprmdpnm.dll - also detected as W32/Stration-AP
<System>\apcunetu.dll - also detected as W32/Stration-AP
<System>\sclgcert.exe - detected as W32/Stratio-FU
<System>\hotpmsta.dat - DAT file, may be deleted safely.
and appends itself to the following registry entry to start itself:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
AppInit_DLLs
mprmdpnm.dll