This worm is a Windows PE EXE file. It is 90,304 bytes in size. It is packed using Upack. The unpacked file is approximately 237KB in size.

Installation

When launched, the worm creates the following files:

%System%\shfoxpob.dat
%System%\shfoxpob.exe
%System%\shfoxpob.dll

The worm also creates…

Related Posts

This entry was posted on Thursday, April 19th, 2007 at 11:15 am and is filed under Virus Threats.