This Trojan downloads files from the Internet to the victim machine and launchesthem for execution. The Trojan itself is a Windows PE EXE file. It is 16 896bytes in size, and packed using UPX. The unpacked file is approximately 44KBin size. It is written in C++.Once launched, the Trojan causes the following dialogue box to be displayedon screen: If the user clicks “Cancel”, the Trojan will cease running. Ifthe user clicks “OK”, the Trojan will download a file called “sexyscreen.exe”from the following link: http://www.******.com/ist/softwares/addins/sexyscreen.exe (At the time of writing the link was not working.) The file is saved to the Trojan’s work directory as "sexyscreen.exe": %WorkDir%/sexyscreen.exe This file will then be launched for execution. If your computer does not have an up-to-date antivirus, or does not have anantivirus solution at all, follow the instructions below to delete the maliciousprogram: - Delete the original Trojan file (its location will depend onhow it penetrated the victim machine).
- Delete the file downloaded by the Trojan:
%WorkDir%/sexyscreen.exe - Update your antivirus databases and perform a full scan of thecomputer (download a trial version of Kaspersky Anti-Virus).
Printed From:http://www.viruslist.com/en/viruses/encyclopedia?virusid=39455
Similar Virus/Threat >>
Trojan-Downloader.Win32.QDown.b
This Trojan downloads other malicious programs from the Internet and launchesthem on the victim machine. The program itself is a Windows PE EXE file. Itis 43008 bytes in size. It is not packed in...
Trojan-Downloader.Win32.Nurech.at
This Trojan downloads files via the Internet without the knowledge or consentof the user. It is a Windows PE EXE file. The file is approximately 28KB insize. It is packed using UPX. The unpacked...
Trojan-Downloader.Win32.Small.jk
This Trojan downloads other programs via the Internet without the knowledgeor consent of the user and launches them on the victim machine. The programitself is a Windows PE EXE file. It is 36,352...
Trojan-Downloader.Win32.Small.ddp
This Trojan downloads other malicious programs. It is a Windows PE EXE file.It is written in Microsoft Visual C++. It is not packed in any way. The sizeof infected files may vary from 20KB to...
Trojan-Downloader.Win32.IstBar.bo
This Trojan downloads other programs via the Internet and launches them on thevictim machine without the user’s knowledge or consent. The program itselfis a Windows PE EXE file. It is 8,704...
Trojan-Downloader.Win32.Small.eqn
Trojan-Downloader.Win32.Bagle.cu
|
