Updated: February 13, 2007 11:39:04 AM
Type: Spyware
Risk Impact: High
File Names: Goidr.exe
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP
When Spyware.Goidr runs, it does the following:
- Adds the value:
"goidr"="%Sysem%\goidr.exe"
to the registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
so that the Goidr.exe file runs when you start Windows.
Note: %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
- Adds multiple values to the registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\GoIDR
- Sends information to the following servers:
- www.danetport.com
- www.infport.com
- www.webnetinfo.net
- www.srfgate.com
- Might download files depending on server response.
Technorati
Digg
Delicious
Reddit
StumbleUpon
Yahoo Buzz
Twitter
Facebook
Newsvine
