W32/Xanib-A

By Domesticus in Viruses

Translate To:

W32/Xanib-A is a virus for the Windows platform that infects executable and multimedia files on a compromised computer.

File System Details

W32/Xanib-A may create the following file(s):

#	File Name	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	%System%\[SECOND SET OF RANDOM CHARACTERS].exe
Name: %System%\[SECOND SET OF RANDOM CHARACTERS].exe Type: Executable File
2.	%System%\[FIRST SET OF RANDOM CHARACTERS].exe
Name: %System%\[FIRST SET OF RANDOM CHARACTERS].exe Type: Executable File
3.	%Windir%\win.ini
Name: %Windir%\win.ini
4.	%Windir%\system.ini
Name: %Windir%\system.ini
5.	%System%\binax.nfo
Name: %System%\binax.nfo

W32/Xanib-A may create the following registry entry or registry entries:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\"[SECOND SET OF RANDOM CHARACTERS]" = "Error"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\"[FIRST SET OF RANDOM CHARACTERS]" = "Error"

HKEY_LOCAL_MACHINE\SOFTWARE\[SECOND SET OF RANDOM CHARACTERS]\"[SECOND SET OF RANDOM CHARACTERS]" = "%System%\[SECOND SET OF RANDOM CHARACTERS].exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shell\Win32.Xanib\Command\"(default)" = "Explorer.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\[FIRST SET OF RANDOM CHARACTERS]\"[FIRST SET OF RANDOM CHARACTERS]" = "%System%\[FIRST SET OF RANDOM CHARACTERS].exe"