Home Malware Programs Worms Dabora

Dabora

Posted: March 28, 2006

Dabora is an Internet worm that spreads by e-mail in messages with spoofed addresses and fake links, which should lead to virtual postcards, but instead silently download and install the spyware.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 updatexp.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunwnxpupdate

Related Posts

Loading...