TROJ_SASFIS.WII
PLATFORM:
Windows 2000, Windows XP, Windows Server 2003
OVERALL RISK RATING:
DAMAGE POTENTIAL:
DISTRIBUTION POTENTIAL:
REPORTED INFECTION:
Threat Type: Trojan
Destructiveness: No
Encrypted: No
In the wild: Yes
OVERVIEW
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
As of this writing, the said sites are inaccessible.
TECHNICAL DETAILS
File Size:
28,160 bytes
File Type:
EXE
Memory Resident:
Yes
Initial Samples Received Date:
29 Mar 2011
Arrival Details
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
Installation
This Trojan injects codes into the following process(es):
- svchost.exe
Download Routine
This Trojan connects to the following website(s) to download and execute a malicious file:
- http://{BLOCKED}romo.ru
As of this writing, the said sites are inaccessible.