Sunday, October 08, 2006

I-Worm.Leebad.A

Leebad A, I-Worm.Leebad.A, is a Microsoft Windows worm. On infection, Leebad copies admin.bat, autorun.inf, System32.exe, and system32dll.dll to the root of all available drives including network ones. Autorun.inf runs System32.exe on infection. Admin.bat creates a new administrator account with a log-in password of abcd1234!@# and system32dll.dll is a keystroke logger.