|
特 徴: This Trojan can arrive to the system through the following:
- as an email attachment
- downloading from a Web site
- installation by another malware
Upon execution, it drops a copy of itself as WINLOGON.EXE in the Windows folder. It then executes the dropped copy and terminates the original process.
It creates several registry entries to ensure its execution every system startup.
This Trojan deletes all registry entries under certain registry keys. It also modifies the Windows HOSTS file to prevent the affected user from accessing certain Web sites.
このウイルスに関しては次の情報も参照してください。 対応方法 詳細 感染状況
情報公開日: 2005/03/26
ウイルスデータベース検索
このウイルス情報に関して. こちらのアンケートにお答えください。
|