SonicALERT
Search

Sonicwall Signatures

 

Go to All Categories list.


  Win32.VIKING_2
Win32.VIKING_2 is a Worm. Worms spread from computer to computer, making copies of themselves over the network. They could spread over email, IM, peer-to-peer networks, or directly over the wire by leveraging vulnerabilities. Win32.VIKING_2 is compressed using the executable packer and its file size is 34,137 bytes. It uses the network connection:
  • Sends a ping request (ICMP.DLL) to 10. 0. 0. 2.

Win32.VIKING_2 drops the following files on the hard drive:

  • C:\WINDOWS\rundl132.exe (34137 bytes)
  • C:\_desktop.ini (9 bytes)
It also monitors the list of running processes, is executed every time Windows starts.


Relevant Information