Home > Virus > Worms > I-Worm.Leebad.A

Virus Name: I-Worm.Leebad.A

Aliases: W32/Leebad-A, Worm.Win32.Leebad.a, W32/Sautor.worm, TROJ_ADDUSER.F

Leebad is a Microsoft Windows worm.  On infection, Leebad copies admin.bat, autorun.inf, System32.exe, and system32dll.dll to the root of all available drives including network ones.  Autorun.inf runs System32.exe on infection.  Admin.bat creates a new administrator account with a log-in password of abcd1234!@# and system32dll.dll is a keystroke logger.

Copyright (c) 2006, 2008  A. Ryan Robbins.  All Rights Reserved.