Rbot.AAAJ is a Trojan. A Trojan is a program that pretends to have a valid use, but in fact modifies the user's computer in malicious way. Trojans do not replicate or spread to other computers. Rbot.AAAJ is compressed using the executable packer and its file size is 425,984 bytes. This malware is written in Visual Basic.This malware is written in Borland Delphi. It also changes Windows registry: - Creates key "HKCU\Software\Enigma Protector\17C1F79A069ADED9-F1A5A7FB2DCC5FEA".
- Creates key "HKCU\Software\EnigmaDevelopers".
- Creates key "HKCU\Software\Enigma Protector\17C1F79A069ADED9-F1A5A7FB2DCC5FEA\B23C8A7F19C3F61B-0334C661B6FA0C6D".
- Sets value "Options"="\xd5\x19\x16
It also contains anti-debugging code.
|