Home / malware

PDF

Win32.Worm.Sasser.F

First posted on 21 November 2011.
Source: BitDefender

Aliases :

There are no other names known for Win32.Worm.Sasser.F.

Explanation :

This is a slightly different version of Win32.Worm.Sasser.A

The diferrecies are the following:
The mutex name is billgate
The log file name is now c:win.log
The name of the file
used for copying itself in Windows folder is now
napatch.exe

The run registry key becomes
HKLMSoftwareMicrosoftWindowsCurrentVersionRun
apatch.exe =
%windows%
apatch.exe

Last update 21 November 2011

 

TOP