Home Malware Programs Worms W32.Ronoper.B

W32.Ronoper.B

Posted: March 28, 2006

W32.Ronoper.B@mm is a worm that attempts to spread itself through email, mIRC and file-sharing networks. The worm also contains a Backdoor functionality and tries to terminate the processes of many applications, including antivirus and security software.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 Systools.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}Browsetothekey:DeletethevalueSystemToolkit
Loading...