high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Protection available since | 25 August 2006 14:21:44 (GMT) |
| Last updated | 19 May 2007 07:00:08 (GMT) |
| Detected by | All Sophos products |
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Please follow the instructions for removing worms.
More Information
W32/Stration-F is a worm for the Windows platform.
When W32/Stration-F is installed the following files are created:
<System>\plussisb.exe
<System>\vjoyterm.dll
<System>\vjoyterm.exe
The files vjoyterm.exe and vjoyterm.dll are also detected as W32/Stration-F. The file plussisb.exe is not inherently malicious.
The following registry entries are created to run code exported by vjoyterm.dll on startup:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\vjoyterm
DllName
<System>\vjoyterm.dll
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\vjoyterm
Startup
WlxStartupEvent
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\vjoyterm
Impersonate
0
|
