|
Trend Micro detects this as WORM_RORON.C
Regards,
Kane
-----Original Message-----
From:
[EMAIL PROTECTED] on behalf of Aditya , ALD [
Aditya Lalit Deshmukh ]
Sent: Tue 24/08/2004 1:03 AM
To:
[EMAIL PROTECTED] Netsys. Com
Cc:
Subject:
[Full-Disclosure] Possible New Malware....
Hi List, Possible new malware makes startup
entries and copies itself to the windows folder this is where it was found,
creates a CurruntPowerProfile reg startup key with a value of
Rundll32.exe,powrprof.dll,LoadCurrentPwrScheme2.exe cant find anything else
that it is doing except that it is written in VB anyone willing to have a look
at it ? the files are attached as they are just ~ 40 KB -aditya ( simply
ren *.txt to *.exe ) |
