Categories: Downloader,Hacker Tool
This family of Trojans downloads and installs new malware or adware on the computer. The downloader then either launches the new malware or registers it to enable autorun according to the local operating system requirements.
The names and locations of malware to be downloaded are either coded into the Trojan or downloaded from a specified website.
These utilities are designed to penetrate remote computers in order to use them as zombies (by using backdoors) or to download other malicious programs to computer.
Exploits use vulnerabilities in operating systems and applications to achieve the same result.
[Kaspersky]HackTool.Win32.IpcScan.160;
[Panda]Application/Serv-U-Based.A,HackTool/IPCScan.B
Visible Symptoms:
Files in system folders:
[%DESKTOP%]\free screensavers.lnk
[%DESKTOP%]\old port casino.lnk
[%WINDOWS%]\zahov.exe
[%DESKTOP%]\free screensavers.lnk
[%DESKTOP%]\old port casino.lnk
[%WINDOWS%]\zahov.exe
How to detect Other:
Files:
[%DESKTOP%]\free screensavers.lnk
[%DESKTOP%]\old port casino.lnk
[%WINDOWS%]\zahov.exe
[%DESKTOP%]\free screensavers.lnk
[%DESKTOP%]\old port casino.lnk
[%WINDOWS%]\zahov.exe
Registry Keys:
HKEY_CLASSES_ROOT\favorite.favoriteman
HKEY_CLASSES_ROOT\favorite.favoriteman.1
HKEY_CLASSES_ROOT\bho42602.clsdockwindow
HKEY_CLASSES_ROOT\bho426022
HKEY_CLASSES_ROOT\clsid\{4cf5275b-cdbc-11d3-a8af-0090279a5978}
HKEY_CLASSES_ROOT\interface\{072d14ef-99b6-49dd-9be5-76142727b7ac}
HKEY_CURRENT_USER\software\inetcash
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\inetbar v1.1 r2_is1
Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
Removing Other:
You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.
Or buy it to remove ALL viruses from your computer.Also Be Aware of the Following Threats:
ZSearch BHO Removal
Small.B Trojan Symptoms
Remove DlToon Trojan
Zlob.Fam.Internet Explorer Secure Plug-in Trojan Removal instruction
Essgol Trojan Cleaner
No comments:
Post a Comment