Home Malware Programs Viruses Virus.Xorer!ct

Virus.Xorer!ct

Posted: November 3, 2010

Virus.Xorer!ct is a dangerous computer virus capable of modifying other files by infecting and overwriting them. Virus.Xorer!ct can compromise your system and personal information by allowing a hacker access to your computer. Virus.Xorer!ct may display false positives and block legitimate anti-virus programs. Virus.Xorer!ct may go undetected but must be removed the instant it is detected using a reliable spyware detection tool.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %System%\107719.log
    2 %System%\107782.log
    3 %System%\Com\lsass.exe
    4 %System%\Com\netcfg.000
    5 %System%\Com\netcfg.dll
    6 %System%\Com\smss.exe
    7 %System%\dnsq.dll
    8 c:\037589.log
    9 c:\AUTORUN.INF
    10 c:\pagefile.pif

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Component Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}][HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Component Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4}][HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden]HKEY..\..\..\..{RegistryKeys}409 =AppInit_DLLs =Type =HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
Loading...