| Detection added |
May 21 2007 14:06 GMT |
| Update released |
May 21 2007 15:35 GMT |
| Description added |
Dec 17 2007 |
| Behavior |
Trojan |
This Trojan has a malicious payload. It is a BAT file. It is 1129 bytes
in size.
When launched, the Trojan causes the following message to be displayed:
The Trojan creates a new user called "Vergon" on the system, and adds this
user to the "administrators" group.
The Trojan then launches the following process:
start %windir%\system\x-executor.exe
and ceases running.
If your computer does not have an up-to-date antivirus, or does not have an
antivirus solution at all, follow the instructions below to delete the malicious
program:
- Use Task
Manager to terminate the malicious program’s process.
- Delete the original Trojan file (the location will depend on
how the program originally penetrated the victim machine).
- Delete the "Vergon" user account.
- Update your antivirus databases and perform a full scan of the
computer (download a trial version of Kaspersky Anti-Virus).
