Net-Worm.Win32.Kolabc.icb
Net-Worm.Win32.Kolabc.icb is a polymorphic network worm that may contain a malicious executable file. Net-Worm.Win32.Kolabc.icb typically spreads via networks with weak passwords or removable storage devices. Net-Worm.Win32.Kolabc.icb may also exploit vulnerabilities in order to access and replicate across networks. Net-Worm.Win32.Kolabc.icb is also able to run in the background of a system without a victim's knowledge, and give unauthorized users access to the system.
Table of Contents
Aliases
2 security vendors flagged this file as malicious.
| Anti-Virus Software | Detection |
|---|---|
| - | Win32/Kolabc.worm.140430.D |
| - | Net-Worm.Win32.Kolabc |
File System Details
Net-Worm.Win32.Kolabc.icb may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %FontsDir%\unwise_.exe |
Registry Details
Net-Worm.Win32.Kolabc.icb may create the following registry entry or registry entries:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ServiceCurrent]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\ServiceCurrent]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole]
