W32.Scard Worm and Trojan program. It uses a NetBIOS attack to spread to systems that have weak passwords. 1. Creates the following files: %System%\Alerter.exe %System%\spc.exe %System%\comwsock.dll %System%\dmsock.dll %System%\SCardSer.exe %System%\sptres.dll 2. Injects the file sptres.dll into the Explorer.exe process. 3. Creates the netlog service. 4. Opens a backdoor that is opened on a random port while running in the process space of the above processes.
Home
