SumWinTek Corp.

HOME / CONTACT

• Company Intro.• Business Contact • Location • Contact Us

• USB Storage Design • Internet Gateway Design • Certified Customers

• Finish Good Service • Infrastructure Service

• Malware Info.

Home > Malware Cyclopedia > Malware Info.

Malware Info.

FAQ

Download

Trojan@W32.FraudPa...

Trojan@W32.Obfusca...

Trojan@W32.Zbot.34

Virus@W32.Sality

Trojan@W32.Zbot.26

Malware Info.

Malware Cyclopedia

Trojan@W32.OlGm.115

OlGm.115 will download malicious files and steal user's information. If you don't know the sender, please don't open the letter.

OlGm.115 come from spam. It will download malicious files and steal user's information. Closes the Windows firewall. If you don't know the sender, please don't open the letter.

Aliases :	Trojan@W32.OlGm.115
Type :	Trojan
Date Discovered :	2009/11/23
System Affected :	Windows NT/2000/XP/2003/Vista

Risk Assessment

Distribution :	Medium
Damage :	Medium

Character

None

Description

Note:Win95/98/me default %system% is C:\windows\system
　　　WinNT/2000/XP/2003 default %system% is C:\WinNT\system32

　　●If you visit a compromised Web server, it will auto-download virus file then
　　　execute it.

　　●After executing virus, it will create following files to %System% folder:
　　　ro.dll

　　●Modify the following registry file：
　　　HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ServiceCurrent\
　　　: 0x00000012
　　　HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch\
　　　Epoch: 0x00000019

　　●Close the Windows firewall.

solution

None

<Back

Visitor:136835