W32/VB-GNT

Category: Viruses and Spyware Protection available since:08 May 2013 18:23:27 (GMT)
Type: Win32 worm Last Updated:08 May 2013 18:23:27 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

W32/VB-GNT exhibits the following characteristics:

File Information

Size
293K
SHA-1
9065d59d974dbfa41377f380a5c790d03bbdc42d
MD5
411263c78881e5b81852ef106c217ef7
CRC-32
f5146da4
File type
Windows executable
First seen
2013-05-08

Runtime Analysis

Registry Keys Created
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Run
    buaaduh
    c:\Documents and Settings\test user\buaaduh.exe /f
  • HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
    NoAutoUpdate
    0x00000001
Registry Keys Modified
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
    ShowSuperHidden
    0x00000000
DNS Requests
  • ns1.datetoday1.com
  • ns1.datetoday1.org
  • ns1.datetoday2.com
  • ns1.datetoday2.net

download Try Sophos products for free
Download now