W32/VB-EUF

Category: Viruses and Spyware Protection available since:30 Jul 2010 17:46:04 (GMT)
Type: Win32 worm Last Updated:30 Jul 2010 17:46:04 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

W32/VB-EUF is a worm for the Windows platform.

W32/VB-EUF includes functionality to run automatically and create files in the <System> folder.

When first run W32/VB-EUF copies itself to <System>\hcontrol32.exe and creates the file <System>\wmts.exe.

The following registry entries are created to run hcontrol32.exe and wmts.exe on startup:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
wmts
<System>\wmts.exe

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
hcontrol32.exe
<System>\hcontrol32.exe

download Try Sophos products for free
Download now