This Trojan is a modification of the system winlogon.exe file. Code has been added to the file so that it will attempt to load a DLL file.
C:\WINNT\System32\msdb32.dllOnce the Trojan has attempted to load this file, it will return control to the original file.
- Delete the original Trojan file (the location will depend on how the program originally penetrated the victim machine).
- Update your antivirus databases and perform a full scan of the computer (download a trial version of Kaspersky Anti-Virus).
This Trojan is a Windows PE EXE file. The file is 190,976 bytes in size.
Payload
Subscribe
Hot Articles