Threat Database Worms Worm:Win32/Zombaque.A

Worm:Win32/Zombaque.A

By JubileeX in Worms

Worm:Win32/Zombaque.A is a worm that proliferates to other PCs through Radmin software. Worm:Win32/Zombaque.A aims at distributing itself to other machines by using numerous presumptive user names and passwords. Once Worm:Win32/Zombaque.A has circulated, it makes the targeted computer part of a botnet. Worm:Win32/Zombaque.A turns the hacked computer into a node in a botnet, which is made of other PCs also corrupted by Worm:Win32/Zombaque.A. When installed, Worm:Win32/Zombaque.A makes system modifications by downloading harmful files and creating the registry entries so that it can load automatically as a service.

File System Details

Worm:Win32/Zombaque.A may create the following file(s):
# File Name Detections
1. %systemroot%\system32\ipz.exe
2. %systemroot%\system32\ipz-db.bin

Registry Details

Worm:Win32/Zombaque.A may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ipz "DisplayName" = "Intelligent p2p zombie"

Trending

Most Viewed

Loading...