 |
W32/Small.AABE Trojan
| Name |
W32/Small.AABE Trojan |
| Aliases |
Win32.Small.aabe, TROJ_FAKEALER.FH, Trojan-Downloader.Win32.Small.aabe, I-Worm/Nuwar.W |
| Discovered on |
August 12, 2008 |
 Virus Information - W32/Small.AABE Trojan:
W32/Small.AABE is a trojan. The trojan will infect Windows systems.
The trojan may be dropped by other malware or may be downloaded from remote website by other malware. It may also be downloaded unknowingly by a user while visiting malicious Website.
Upon execution, the trojan drops the following files:
 lphcng7j0e38v.exe in the Windows System folder,
blphcng7j0e38v.scr in the Windows System folder,
phcng7j0e38v.bmp in the Windows System folder.
The trojan modifies registry at the following locations to load itself during each startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
It also modifies registry at the following locations:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Software Notifier\InstallationID
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SR\0000\Control\ActiveService:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SR\0000\Control\ActiveService
|
