Home Malware Programs Worms Iberio

Iberio

Posted: March 28, 2006

Iberio is a dangerous Internet worm that spreads by infecting vulnerable PCs running Microsoft Windows operating computer with unpatched security flaws. The spyware has a backdoor functionality. It contacts a predetermined web server and gives the remote attacker unauthorized access to a compromised computer. Iberio also silently downloads from the Internet and installs viral threats, usually some trojans. The worm automatically runs on every Windows startup.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 vfprotect.exe
    2 vfprotect2.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunmspro32
Loading...