Koobface.NBA_2 is a Trojan. A Trojan is a program that pretends to have a valid use, but in fact modifies the user's computer in malicious way. Trojans do not replicate or spread to other computers. Koobface.NBA_2 is compressed using the UPX executable packer and its file size is 14,848 bytes. Koobface.NBA_2 drops the following files on the hard drive: - C:\windows\ld03.exe (14848 bytes)
- C:\353454543.bat (98 bytes)
It also changes Windows registry: - Creates value "sysldtray"="c:\windows\ld03.exe" in key "HKLM\Software\Microsoft\Windows\CurrentVersion\Run".
It creates the following mutex to ensure only one instance is running: 6sddfg45303. It also is executed every time Windows starts.
|
