arrow_back
search
close

TROJ_GAMETHI.EIH

April 04, 2013
 ALIASES:

Worm:Win32/Taterf.gen!A (Microsoft), Trojan Horse (Symantec)

 PLATFORM:

Windows 2000, Windows Server 2003, Windows XP (32-bit, 64-bit), Windows Vista (32-bit, 64-bit), Windows 7 (32-bit, 64-bit)

 OVERALL RISK RATING:
 DAMAGE POTENTIAL:
 DISTRIBUTION POTENTIAL:
 REPORTED INFECTION:

  • Threat Type: Trojan

  • Destructiveness: No

  • Encrypted:

  • In the wild: Yes

  OVERVIEW

This Trojan may be dropped by other malware.

It requires its main component to successfully perform its intended routine.

  TECHNICAL DETAILS

File Size:

99,328 bytes

File Type:

DLL

Initial Samples Received Date:

22 Apr 2009

Arrival Details

This Trojan may be dropped by other malware.

Download Routine

This Trojan accesses the following websites to download files:

  • http;//{BLOCKED}1.com/hg2/ll.rar

It saves the files it downloads using the following names:

  • %User Temp%\ll.rar

(Note: %User Temp% is the current user's Temp folder, which is usually C:\Documents and Settings\{user name}\Local Settings\Temp on Windows 2000, XP, and Server 2003, or C:\Users\{user name}\AppData\Local\Temp on Windows Vista and 7.)

Other Details

This Trojan requires its main component to successfully perform its intended routine.