SonicALERT
Search

Sonicwall Signatures

 

Go to All Categories list.


  Stuxnet.A_5
Stuxnet.A_5 is a Trojan. A Trojan is a program that pretends to have a valid use, but in fact modifies the user's computer in malicious way. Trojans do not replicate or spread to other computers.

      Process Related Changes
      It creates the following mutex(es):
      • "JOFIHQF"
      • "CB35EF5D-4591-41d9-BBA2-0363342F3783"

      It creates the following process(es):
      • C:\windows\temp\dllinject.exe
      • C:\Windows\system32\lsass.exe [ C:\Windows\\system32\\lsass.exe ]

        Network Activity
        We observed the following DNS query/queries:
        • www.windowsupdate.com


        Relevant Information