W32/PoPass.b

Type: Worm
Size: 18923 Byte
System Affected: Windows 2000,XP,NT,....
Others Known As:

Trojan-PSW.Win32.QQPass.xw (Kaspersky) W32/Downloader.gen10 (F-Prot)

Characteristics :

1)
Create the following files :

◊ %Program Files%\Common Files\Microsoft Shared\MSInfo\SysWFGwd2.dll
◊ %Program Files%\Common Files\Microsoft Shared\MSInfo\SysWFGwd.dll

When worm runs,downloads worms files from the following sites:
http://www.۵۴۶۰w.cn/xzz/۰۶۰۳.exe


Copyright © 1994-2008 Imen Computer Virology Laboratory I.C.V.L .
All Rights Reserved .
Mehran Rayaneh Engineering Co.