SonicALERT
Search

Sonicwall Signatures

 

Go to All Categories list.


  WOW.NOW_10
WOW.NOW_10 is a Trojan. A Trojan is a program that pretends to have a valid use, but in fact modifies the user's computer in malicious way. Trojans do not replicate or spread to other computers.

        Process Related Changes
        It creates the following process(es):
        • C:\Windows\system32\Rundll32.exe [ Rundll32.exe C:\Windows\system32\msmbhdru.dllw ]

            Registry Related Changes
            It makes the following registry modifications to ensure infection after system reboot:
            • HKLM\Software\Microsoft\Windows\CurrentVersion\Run\pgoxhe = RUNDLL32.EXEC:\Windows\system32\msmbhdru.dll,w


            Relevant Information