Home / malware

PDF

Win32.Msblast.B

First posted on 21 November 2011.
Source: BitDefender

Aliases :

Win32.Msblast.B is also known as Win32.Msblast.A, W32.Blaster.Worm, (NAV.

Explanation :

It is exactly the same as Win32.Msblast.A, except it has some strings changed, namely:

Spreading file is %SYSTEM%\teekids.exe (e.g. C:WindowsSystem32)
Target registry key is:

[HKLMSoftwareMicrosoftWindowsCurrentVersionRunMicrosoft Inet Xp..]

Unused strings are now:
“Microsoft can s*** my left t****!”
“Bill Gates can s*** my right t****! And All Antivirus Makers Can S*** My Big Fat C***”

Last update 21 November 2011

 

TOP