This Trojan is an HTML file. It is 1,824 bytes in size.When launching, the Trojan creates the following file in the C:\ root directory: C:\UPLDFILE.FTP This file contains the configuration needed to connect to an FTP server anddownload files from the server. The Trojan then uses a utility, ftp.exe, and information from the file which it created earlier, to download anotherprogram from the following FTP server: ftp://ftp.***globe.com/aolextras.exe (at the time of writing, this file could not be downloaded) The Trojan saves this file to the following directory: C:\windows\aolextras.exe (absolute path) The downloaded file is then launched for execution. If your computer does not have an up-to-date antivirus, or does not have anantivirus solution at all, follow the instructions below to delete the maliciousprogram: - Delete the original Trojan file (the location will depend onhow the program originally penetrated the victim machine).
- Delete the following files:
C:\windows\aolextras.exeC:\UPLDFILE.FTP - Update your antivirus databases and perform a full scan of thecomputer (download a trial version of Kaspersky Anti-Virus).
Printed From:http://www.viruslist.com/en/viruses/encyclopedia?virusid=25910
Similar Virus/Threat >>
Trojan.JS.Wincrash.d
This Trojan is a JavaScript scenario. It can be found on web pages. The fileis 1,335 bytes in size.Once launced, the Trojan writes the string below 1000 times to the currentdocument:...
|
