This Trojan is designed to install and launch other programs on the victim machine.It is a Windows PE EXE file. The size of infected files may vary from 8KB to19KB.Once launched, the Trojan extracts the following files from itself and launchesthem for execution: - %WinDir%\svchost.exe — this file is 11,776 bytes in size. It will be detected by KasperskyAnti-Virus as Trojan-Spy.Win32.Tofger.ab;
- %WinDir%\msto32.dll — this file is 3,072 bytes in size. It will be detected by KasperskyAnti-Virus as Trojan-Spy.Win32.Tofger.aa.
The Trojan also drops the following file, %WinDir%\sysini.ini, which contains the following string: ***Computer was successfully infected*** Once launched, the Trojan registers itself in the system registry: [HKLM\Software\Microsoft\Windows\CurrentVersion\Run]
"Online Service" = "%WinDir%\svchost.exe" This ensures that the Trojan will be launched each time Windows is bootedon the victim machine. If your computer does not have an up-to-date antivirus, or does not have anantivirus solution at all, follow the instructions below to delete the maliciousprogram: - Use Task Manager to terminate the Trojan process.
- Delete the original Trojan file (the location will depend onhow the program originally penetrated the victim machine).
- Delete the files created by the Trojan:
%WinDir%\svchost.exe%WinDir%\msto32.dll%WinDir%\sysini.ini - Delete the following system registry key parameter:
[HKLM\Software\Microsoft\Windows\CurrentVersion\Run]
"Online Service" = "%WinDir%\svchost.exe" - Update your antivirus databases and perform a full scan of thecomputer (download a trial version of Kaspersky Anti-Virus).
Printed From:http://www.viruslist.com/en/viruses/encyclopedia?virusid=40755
Similar Virus/Threat >>
Trojan-Dropper.Win32.Small.fz
This Trojan is designed to install and launch other programs on the victim machinewithout the user’s knowledge or consent. This Trojan is a Windows PEEXE file. It is 16,377 bytes in...
Trojan-Dropper.Win32.Small.k
This Trojan is designed to install other malicious progrms to the victim machine.It is a Windows PE EXE file. The file is approximately 615KB in size. Once launched, the Trojan extracts two files...
Trojan-Dropper.Win32.Small.p
This Trojan is designed to install other Trojan programs to the victim machine.It is a Windows PE EXE file. It is 529,920 bytes in size.When launching, the Trojan copies itself to the Windows...
Trojan-Dropper.Win32.Small.cb
This Trojan downloads and launches other Trojan programs on the victim machine.It is a Windows PE EXE file. It is written in Assembler. It is 7,168 bytesin size. It is packed using UPX. The...
Trojan-Dropper.Win32.Small.do
This Trojan installs other programs to the victim machine without the knowledgeor consent of the user. It is a Windows PE EXE file. It is 36,864 bytes insize. The Trojan also extracts the...
|
