









 |
W32/IRCBot.LKG Trojan
| Name |
W32/IRCBot.LKG Trojan |
| Aliases |
IRC/SdBot, W32/Spybot.EDAU, W32/Gaobot.QKS.worm, Troj/VB-EHL |
| Updated on |
November 17, 2009 |
Virus Information - W32/IRCBot.LKG Trojan:
W32/IRCBot.LKG is a trojan. The trojan will infect Windows systems.
Upon execution, the trojan drops following files in Windows\System32\Macromed\Flash folder:
FlashUtil10c.exe
uninstall_activeX.exe
It also drops client.exe file in Windows folder
The trojan modifies registry at the following locations:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_USERS\S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXX-XXXX\Software\Microsoft\Windows\CurrentVersion\Run

|