Msn Trojan
Copyright © MegaSecurity
By ?
Informations
| From | the Netherlands |
| Author | ? |
| Family | MSN Trojan |
| Category | Remote Access |
| Version | Msn Trojan |
| Language | Visual Basic |
Additional Information
dropped files:
c:\autoexec.exe size: 221.184 bytes
c:\io.dll size: 66 bytes
c:\WINDOWS\mss01.exe size: 221.184 bytes
c:\WINDOWS\sprocks.bmp size: 66 bytes
c:\WINDOWS\wrgf.exe size: 221.184 bytes
c:\WINDOWS\system32\diskf.dll size: 66 bytes
c:\WINDOWS\system32\log boot.exe size: 221.184 bytes
c:\WINDOWS\system32\msgr.exe size: 221.184 bytes
c:\WINDOWS\system32\reginf.ret size: 66 bytes
startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "bootlogfile"
data: C:\WINDOWS\System32\log boot.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "msmsg"
data: C:\WINDOWS\wrgf.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "msmsgr"
data: C:\Documents and Settings\Kobayashi\Desktop\Backdoor.VB.jw.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Norton antivirus scan"
data: C:\WINDOWS\mss01.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "office decryptfiles"
data: C:\WINDOWS\System32\msgr.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "start bat file"
data: c:\autoexec.exe
tested on Windows XP
November 10, 2004If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.