Trojan.PWS.Sinowal.AK

tag:Trojan PWS

The trojan drops 3 files in %SystemDir%\\..\\temp or in %CommonFilesDir%\\Microsoft Shared\\Web Folders, named IBM Please let BitDefender disinfect your files.

Presence of IBMXXXXX.EXE and IBMYYYYY.DLL (5 digit numbers) in %SystemDir%\\..\\temp or %CommonFilesDir%\\Microsoft Shared\\Web Folders.
Presence of one of the following:
$_3472452.EXE
$_2341233.TMP
$_2341234.TMP
$_2341235.TMP
in the mentioned folders can also be a sign of this malware.

previous:Trojan.PWS.OnlineGames.ZAY
previous:Trojan.PWS.Lmir.UMH

Virus Source from:

New articles

Trojan.PWS.Agent.SGD The malware drops the following files:1) %windir%\system32\hbqqxx.dll- this .dll will be injected in all the running processes and it will try to steal sensitiv...Trojan.PWS.OnlineGames.AABK First of all, the malware deletes the copies of%windir%system32\rpcss.dll (a Windows file) from%windir%\system32\dllcache\rpcss.dlland%windir%\servicepackfiles\...Trojan.PWS.Tupai.ANormal0falsefalsefalseMicrosoftInternetExplorer4st1\:*{behavior:url(#ieooui) }/* Style Definitions */table.MsoNormalTable {mso-style-name:"Table Normal"; mso-ts...Trojan.PWS.Lmir.UMHWhen launched, the trojan drops in %windir%\system32 folder a DLL file having the name derived form an existing DLL from same folder (e.g. rasmanqn3.dll, mdimap...Trojan.PWS.OnlineGames.ZKHThis malware is used to steal user information from online games as qqlogin.exe hx2game.exe and others. The dll file will be injected in every running process. ...

Hot Articles

Trojan.PWS.Sinowal.AK

Computer Virus Clounds