WOW.NOW_10 is a Trojan. A Trojan is a program that pretends to have a valid use, but in fact modifies the user's computer in malicious way. Trojans do not replicate or spread to other computers. Process Related Changes It creates the following process(es): - C:\Windows\system32\Rundll32.exe [ Rundll32.exe C:\Windows\system32\msmbhdru.dllw ]
Registry Related Changes It makes the following registry modifications to ensure infection after system reboot: - HKLM\Software\Microsoft\Windows\CurrentVersion\Run\pgoxhe = RUNDLL32.EXEC:\Windows\system32\msmbhdru.dll,w
|