TROJ_ANOZYNS.A

This Trojan may be dropped by other malware.

It is a component of other malware.

It connects to certain websites to send and receive information. However, as of this writing, the said sites are inaccessible.

Arrival Details

This Trojan may be dropped by other malware.

Installation

This Trojan is a component of other malware.

Other System Modifications

This Trojan modifies the following registry entries:

HKEY_CURRENT_USER\Software\Microsoft
{83a47cab-4b76-47f3-bf79-88b1dfe4e410} = "{Hex Value}"

Other Details

This Trojan connects to the following website to send and receive information:

• india1.{BLOCKED}e.{BLOCKED}s.com:443

However, as of this writing, the said sites are inaccessible.

NOTES:

It deletes the following registry entries:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\{service name}
InstallModule = "{value}"

It deletes the following file:

• {service name}.{extension}