Koobface.DJI is a Worm. Worms spread from computer to computer, making copies of themselves over the network. They could spread over email, IM, peer-to-peer networks, or directly over the wire by leveraging vulnerabilities. Koobface.DJI is compressed using the UPX executable packer and its file size is 14,336 bytes. Koobface.DJI drops the following files on the hard drive: - C:\Progra~1\webserver\webserver.exe (14336 bytes)
It also changes Windows registry: - Creates key "HKLM\System\CurrentControlSet\Services\webserver".
- Sets value "FailureActions"="" in key "HKLM\System\CurrentControlSet\Services\webserver".
|
