Type: Worm
Size: 16896 Byte
System Affected: Windows 2000,XP,NT,....
Others Known As:

Characteristics :

1) Creates the following registry keys :

◊ HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Matri-x27 = FooVA.EXE


◊ HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\Matri-x27 = FooVA.EXE


◊ HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnceEx\Matri-x27 = FooVA.EXE

◊ %root%\FooVA.exe

This worm hides the processes of taskmanager.