Worm-Agent-W-45

From CCIPO Wiki

Malware name Worm.Agent.W.45

Type Worm

Affected platform Win32

Media-Type application/executable

MD5 checksum 083A9DA79C3D43BCC29B7FDAB4486DC4

Static file yes

Filesize 90,112 Bytes

Also Known As Sophos Mal/Autorun-E McAfee W32/Autorun.worm.gen

Protection Webwasher Anti Malware 7001.1225.x

Side effects

   * Drops a file
   * Registry modification

Files

It copies itself to the following location: C:\RECYCLER\S-1-5-21-8749679017-0950430147-468708784-3200\hlpsvc.exe

The following file is created:

– C:\RECYCLER\S-1-5-21-8749679017-0950430147-468708784-3200\Desktop.ini This is a non malicious text file with the following content: [.ShellClassInfo] CLSID={645FF040-5081-101B-9F08-00AA002F954E}