Home Malware Programs Worms Worm.Win32.Agent.vk

Worm.Win32.Agent.vk

Posted: October 29, 2009

Worm.Win32.Agent.vk is a network worm that copies itself across computer networks through security holes on vulnerable computers connected to one another. Generic.dx!bc belongs to a category of Worm.Generic. Generic.dx!bc is capable to download other files from the Internet. Worm.Win32.Agent.vk creates a startup registry entry that loads into memory at startup of Windows.

Aliases

Generic Downloader.x!bi
Mal/DelpDldr-F
Worm.Win32.Agent (Ikarus)

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %System%\lpt.exe
    2 %System%\msxm1r.dll

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ExplorerHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run
Loading...