Trojan-Clicker.Win32.Lopin
| Alert Level : | Medium |
| Discovered: | Jan 15 2004 |
| Tag: | Trojan Clickers |
| Discoverer and Source: | http://www.kaspersky.com/ |
Malware Behavior and Technical Description
This TrojanClicker is written in Cbuilder.
InstallationWhen installed, the Trojan copies itself to the Windows system directory as rundll32.exe and registers this file in the system registry:
[HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ControlPanel]Payload
The Trojan changes the file msblank.htm in the Windows system directory. Once altered, masblank.htm contains a link to the site cploving.awmhost.net. The user will always be directed to this site instead of being shown a blank page in Internet Explorer.
0
Removal Trojan-Clicker.Win32.Lopin instructions:
0
Need help? Live computer support via remote at SupportSpace |
