My Bitdefender
  • 0 Shopping Cart

SHARE
THIS ON

Facebook Twitter Google Plus

Win32.Worm.Sasser.F

MEDIUM
LOW
74752 bytes

Symptoms







Removal instructions:




Analyzed By

Sorin Victor Dudea BitDefender AntiVirus Researcher

Technical Description:

This is a slightly different version of Win32.Worm.Sasser.A

The diferrecies are the following:
The mutex name is billgate
The log file name is now c:\win.log
The name of the file
used for copying itself in Windows folder is now
napatch.exe

The run registry key becomes
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\napatch.exe =
%windows%\napatch.exe