Home Malware Programs Viruses W32.Virut.CF

W32.Virut.CF

Posted: July 9, 2009

W32.Virut.CF (also referred to as W32/Virut.n) is a virus that will attempt to infect executable files such as .exe, .scr and other Portable Executable (PE) file formats. W32.Virut.CF will inject an iframe into the body of the web-related files such as .html, .php and .asp, in order to further harm your computer. The most challenging thing about W32.Virut.CF is the fact that it can bypass antivirus program detection and evade the scanning process by using Entry Point Obfuscation (EPO).

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List
Loading...