W32/Jeefo-A

W32/Jeefo-A

Aliases : PE_JEEFO.A, W32/Jeefo, W32.Jeefo

Type : Win32 worm

Description
W32/Jeefo-A may create the following registry entries upon execution, so that it is run every time the computer restarts:

HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices\PowerManager
= "<full file path>"

HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices\PowerManager
= "C:\<Windows>\SVCHOST.EXE"


http://www.sophos.com/virusinfo/analyses/w32jeefoa.html

 

Symantec:

http://securityresponse.symantec.com/avcenter/venc/data/w32.jeefo.html

 

McAfee: W32/Jeefo
http://vil.nai.com/vil/content/v_100277.htm

Trend: PE_JEEFO.A
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=PE_JEEFO.A