Threat Encyclopedia

Selected viruses, spyware, and other threats: sorted alphabetically

Win32/Small.NGK

Aliases:Trojan.Win32.Agent2.cidl (Kaspersky), Trojan:Win32/Sisproc (Microsoft) 
Type of infiltration:Trojan  
Size:14731 B 
Affected platforms:Microsoft Windows 
Signature database version:4437 (20090918) 

Short description

Win32/Small.NGK is a trojan that installs Win32/Patched.BK malware.

Installation

The trojan does not create any copies of itself.

The trojan attempts to modify the following files:
  • %system%kernel32.dll

Other information

The trojan may set the following Registry entries:
  • [HKEY_LOCAL_MACHINESOFTWARE%random%]
    "SN" = "%random%"
    "Bakup" = "%hex_value%"
    "LRU" = "%hex_value%"
  • [HKEY_LOCAL_MACHINESOFTWARE]
    "Licenses" = "%random%"
    "WinInstallInfo" = "00001002"
A string with variable content is used instead of %random%.