Mytob-14 is a Worm. Worms spread from computer to computer, making copies of themselves over the network. They could spread over email, IM, peer-to-peer networks, or directly over the wire by leveraging vulnerabilities. Mytob-14 has a file size of 66,937 bytes. It also changes Windows registry: - Creates value "default"="" in key "HKLM\Software\Microsoft\Windows\CurrentVersion\Run".
- Creates value "default"="" in key "HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices".
It creates the following mutex to ensure only one instance is running: gigbjkbhjlNBTRntr. . It also contains anti-debugging code, attempts to acquire the "SeDebugPrivilege" privileges, monitors the list of running processes, is executed every time Windows starts.
|
