Home Malware Programs Worms Decoy

Decoy

Posted: March 28, 2006

Decoy is a worm that spreads via infected files.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 dkernel.exe
    2 iexplorer.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRundkernelHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRuniexplorer.exeHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsNTCurrentVersionWinlogonShellexplorer.exeiexplorer.exe
Loading...