Pages

Showing posts with label WinZip Malware. Show all posts
Showing posts with label WinZip Malware. Show all posts

Monday, February 1, 2010

Worm.Zimuse.A - WinZip icon Malware

SYMPTOMS:
Presence of the following files
  * %system32%\drivers\mstart.sys
  * %system32%\drivers\mseu.sys

TECHNICAL DESCRIPTION:
 The malware comes as an application with a WinZip icon in order to trick the user into running it. To look even more as a a self-extracting archive it displays a dialog box asking for a password in order to successfully unzip the package contents.