W32/Sdbot.ng

W32/Sdbot.ng

Type: Worm
Size: 80384 Byte
System Affected: Windows 2000,XP,NT,....
Others Known As:

Backdoor.Win32.VanBot.et (Kaspersky)

W32/Ircbot1.gen (F-Prot)

Characteristics :

1) Creates the following registry keys :

◊ HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Log System = %System%\rukcngysu.exe

2) Create the following files :

◊ %System%\[Random.exe]
◊ %root%\[Random.exe]
◊ %[All Drive]%\AUTORUN.INF