| Name: | Coced |
| Aliases: | VGB.Coced, Win32.TheJoiner.155, The Joiner,PWSteal.Coced240b.Tro, |
| Ports: | |
| Files: | 26705-i386-update.exe - 14,104 bytes Temp$01.exe - Temp#01.exe -Vgb.exe - [221 kb] Mswin32.exe - |
| Created: | |
| Requires: | |
| Actions: | Steals passwords / Trojan dropper / ICQ trojan |
| Drops the trojan The Thing 1.6. | |
| Versions: | |
| Registers: | HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Agent\Apps\Run\HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Agent\Apps\Path\HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Agent\Apps\Startup\HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Agent\Apps\Enable\ |
| Notes: | Works on Windows 95, 98 and NT, together with ICQ. |
| Country: | |
| Program: |