Home Malware Programs Worms Yourip

Yourip

Posted: March 28, 2006

Yourip, also known as Stap, is a worm, which spreads through unprotected network shares and by e-mail in messages with infected attachments.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 kernel32.exe
    2 msdtc.exe
    3 office_view.exe
    4 readme.exe
    5 src.dll
    6 verse.exe
    7 wers.ocx

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunccrssHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunmstaskHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunverseHKEY_LOCAL_MACHINESOFTWAREMicrosoftmicroundll32
Loading...