d1vmq.exe , urretnd.exe
Files size 108,840 bytes
MD5: AF5E5D4AF3655E16AF64D77188F275EA
SHA-1: BC0710CE807B3DFB2D166B94987AD60FD9B0B0AF
==================================================
Files Created
C:\Documents and Settings\[UserName]\Local Settings\Temp\ker1.tmp
C:\WINDOWS\system32\urretnd.exe
C:\WINDOWS\system32\optyhww0.dll(0-9)
X:\autorun.inf
X:\d1vmq.exe
(X:\ = C:\ - Z:\)
Registry Modifications
Value Added
HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
cbvcs = "%System%\urretnd.exe"
Values modified
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\
Advanced\ Folder\Hidden\SHOWALL\CheckedValue: 0x00000000
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\
Advanced\Hidden: 0x00000002
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\
Advanced\ShowSuperHidden: 0x00000000
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\
NoDriveTypeAutoRun: 0x00000091
URL to be downloaded/data identified
http://vfgtyp.com/fm4/help.rar > %Temp%\help.rar >help.exe
=======================================================
วิธีกำจัด/แก้ virus : d1vmq.exe,urretnd.exe
=======================================================
Download Fix Tool : PeeTechFix-Win32/PSW.OnlineGame 2.0.5
No comments:
Post a Comment