Home Malware Programs Viruses Virus.Selfish.d

Virus.Selfish.d

Posted: January 26, 2010

Virus.Selfish.d is a computer virus that uses known exploits to replicate across vulnerable networks. Once active, W32.Selfish.B will set up communication with a remote IRC server and create an executable file in a fake Recycle Bin folder to conceal its presence in the system. Virus.Selfish.d contains a keylogger program that can capture all user keystrokes, including confidential details such usernames, passwords and credit card numbers. W32.Selfish.B also has the ability to modify system files by infecting, prepending, or overwriting them. Virus.Selfish.d poses a severe threat to PC security and should be terminated immediately.

Aliases

Virus.Win32.Selfish.d (Kaspersky Lab)
W32/Selfish (McAfee)
W32/Selfish-D (Sophos)
Virus:Win32/Selfish.C (Microsoft)
Win32/Selfish.D (AhnLab)

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Windir%\Cache\Adobe Reader 6.0.1\ENUBIG\instmsia.exe
    2 %Windir%\Cache\Adobe Reader 6.0.1\ENUBIG\instmsiw.exe
    3 %Windir%\Cache\Adobe Reader 6.0.1\ENUBIG\setup.exe
    4 %Windir%\hh.exe
    5 %Windir%\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
    6 %Windir%\msagent\agentsvr.exe
    7 %Windir%\mui\muisetup.exe
    8 %Windir%\NOTEPAD.EXE
Loading...