Kiman_b details

  • Description

    Kiman.b is a dangerous and complex Internet worm, which spreads via network shares protected by weak passwords or by exploiting known system security vulnerabilities. The system can be infected without any user interaction.

  • Exe

    hdcontroller.exe

  • Registry

    HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunhard drive controllerHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunServiceshard drive controllerHKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessStart=4HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServiceswuauservStart=4HKEY_LOCAL_MACHINESYSTEMControlSet001ServiceswscsvcStart=4HKEY_LOCAL_MACHINESOFTWAREMicrosoftOLEEnableDCOM=nHKEY_LOCAL_MACHINESOFTWAREMicrosoftOleEnableRemoteConnect=n