Name:

Trojan.Dishigy.b

Added:

September 17, 2011

Type:

Trojan

Risk:

Low

Payload:

N/A

At risk systems:

Windows 95/98/ME/XP/NT/2003

Description:

When Trojan.Dishigy.b is executed, it performs the following activities:

After execution, it drops the following files:

C:\WINDOWS\system32\drivers\svngage.exe
C:\WINDOWS\keys.ini

It creates/modifies the following registry entries:

ImagePath=  "C:\WINDOWS\system32\drivers\svngage.exe"
HKLM\SYSTEM\ControlSet001\Services\svngage

ImagePath=  "C:\WINDOWS\system32\drivers\svngage.exe"
HKLM\SYSTEM\CurrentControlSet\Services\svngage