Home Malware Programs Trojans VBS/Runner.8192

VBS/Runner.8192

Posted: November 19, 2009

VBS/Runner.8192 is a generic detection name for a Trojan that opens a backdoor and allows the attacker to issue commands to control the infected PC. Unlike viruses, Trojans are spread manually and do not self-replicate. These deceptive programs like VBS/Runner.8192 often worm their way in to the system under the premise that they are beneficial or wanted. The most common installation methods involve system or security exploitation. Once the server component is unwittingly installed on the victim's machine, it opens a port to send a notification to the hacker. The hacker can then connect to the machine using the client component. Distribution channels include email, malicious or hacked web pages, Internet Relay Chat (IRC) and peer-to-peer networks. Symptoms include the presence of unknown files and registries and unexpected network traffic. VBS/Runner.8192 is severely dangerous to your PC and should be removed immediately.

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Windows Script HostHKEY_CURRENT_USER\Software\Microsoft\Windows Script Host\Settings
Loading...