| Podnuha.BUB is a Trojan. A Trojan is a program that pretends to have a valid use, but in fact modifies the user's computer in malicious way. Trojans do not replicate or spread to other computers. Podnuha.BUB has a file size of 116,480 bytes. This malware is written in Borland Delphi. It also changes Windows registry: - Creates key "HKCR\CLSID\{00000000-0000-0000-0000-000000000000}\InprocServer32".
- Sets value "default"="C:\SAMPLE.DLL" in key "HKCR\CLSID\{00000000-0000-0000-0000-000000000000}\InprocServer32".
- Sets value "ThreadingModel"="apartment" in key "HKCR\CLSID\{00000000-0000-0000-0000-000000000000}\InprocServer32".
It creates the following mutex to ensure only one instance is running: Global\U6EDz6C-D_bhom_9ts. |
