| Larchik.O is a Trojan. A Trojan is a program that pretends to have a valid use, but in fact modifies the user's computer in malicious way. Trojans do not replicate or spread to other computers. Larchik.O has a file size of 182,016 bytes. This malware is written in Visual Basic. Larchik.O drops the following files on the hard drive: - C:\WINDOWS\ie7.exe (105095 bytes)
- C:\WINDOWS\hao123.exe (40960 bytes)
- C:\WINDOWS\game.ico (13942 bytes)
- C:\WINDOWS\StormBox.ico (13270 bytes)
- C:\DOCUME~1\Administrator\Lb\\x0f8\x0f.url (175 bytes)
- C:\DOCUME~1\Administrator\Lb\s\x1f5q.url (179 bytes)
It also changes Windows registry: - Creates key "HKCU\Software\WinRAR SFX".
- Sets value "C%%WINDOWS"="C:\WINDOWS" in key "HKCU\Software\WinRAR SFX".
- Sets value "C%%DOCUME~1%Administrator%Lb"="C:\DOCUME~1\Administrator\Lb" in key "HKCU\Software\WinRAR SFX".
|
