Home Malware Programs Worms Filukin

Filukin

Posted: March 28, 2006

Filukin is a rapidly spreading worm that distributes itself via e-mail messages with infected attachments. These attachments actually are executable files, but may look like normal text documents.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 autorun.bat
    2 data.doc.exe
    3 document.doc.exe
    4 exittodosprompt.bat
    5 info.doc.exe
    6 mskernell.bat
    7 readme.doc.exe
    8 readme.exe
    9 taetae.txt.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunNOYPI_KANG_ASTIG=%Windir%exittodosprompt.pifHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunTANG_INA_MO=%System%AutoRun.bat
Loading...