Search

\CurrentVersion\Run hike = "%Application Data%\hike\hike.exe " Other System Modifications This Trojan adds the following registry keys: HKEY_CURRENT_USER\Software\Microsoft\ Internet Explorer\Main\FeatureControl

TROJ_INJECTR.THN

\CurrentVersion\Run yzedug = "%Application Data%\yzedug\yzedug.exe " Other System Modifications This Trojan adds the following registry keys: HKEY_CURRENT_USER\Software\Microsoft\ Internet Explorer\Main

TROJ_INJECTS.SBD

\CurrentVersion\Run ihobo = "%Application Data%\ihobo\ihobo.exe " Other System Modifications This Trojan adds the following registry keys: HKEY_CURRENT_USER\Software\Microsoft\ Internet Explorer\Main\FeatureControl

TROJ_KOVTER.THF

\CurrentVersion\Run lixur = "%Application Data%\lixur\lixur.exe " Other System Modifications This Trojan adds the following registry keys: HKEY_CURRENT_USER\Software\Microsoft\ Internet Explorer\Main\FeatureControl

TROJ_KOVTER.TIF

\CurrentVersion\Run maqe = "%Application Data%\maqe\maqe.exe " Other System Modifications This Trojan adds the following registry keys: HKEY_CURRENT_USER\Software\Microsoft\ Internet Explorer\Main\FeatureControl

TROJ_KOVTER.THN

\CurrentVersion\Run beqo = "%Application Data%\beqo\beqo.exe " Other System Modifications This Trojan adds the following registry keys: HKEY_CURRENT_USER\Software\Microsoft\ Internet Explorer\Main\FeatureControl

TROJ_BANKER.UKL

\S-1-5-21-1645522239-1292428093-682003330-1003\Software\ Microsoft\Internet Explorer\Privacy HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ SystemCertificates\ROOT\Certificates\ A9B406D8B52FB8E9994441A2ADFCA69B60D59619 It adds the following registry

TROJ_PROXY.TORZA

\S-1-5-21-1645522239-1292428093-682003330-1003\Software\ Microsoft\Internet Explorer\Privacy HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ SystemCertificates\ROOT\Certificates\ A9B406D8B52FB8E9994441A2ADFCA69B60D59619 It adds the following registry

TSPY_BANKER.YYQM

\S-1-5-21-1645522239-1292428093-682003330-1003\Software\ Microsoft\Internet Explorer\Privacy HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ SystemCertificates\ROOT\Certificates\ A9B406D8B52FB8E9994441A2ADFCA69B60D59619 It adds the following registry

TSPY_BANPROX.A

\S-1-5-21-1645522239-1292428093-682003330-1003\Software\ Microsoft\Internet Explorer\Privacy HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ SystemCertificates\ROOT\Certificates\ B9FB70DDD466F3A5A05E2366D8ABFAAFD8AEDAD9 It adds the following registry

TROJ_AGENT.AUVV

routine: HKEY_CURRENT_USER\Software\Microsoft\ Internet Explorer\Main Use FormSuggest = yes HKEY_CURRENT_USER\Software\Microsoft\ Internet Explorer\Main DisableScriptDebuggerIE = yes HKEY_CURRENT_USER

TROJ_KRYPTO.SMIU

}.exe /q" Other System Modifications This Trojan adds the following registry keys: HKEY_CURRENT_USER\Software\Microsoft Windows HKEY_CURRENT_USER\Software\Microsoft\ Internet Explorer\Recovery

TROJ_KOVTER.TFI