Trojan.PWS.Sinowal.AK

tag:Trojan   PWS  

The trojan drops 3 files in %SystemDir%\\..\\temp or in %CommonFilesDir%\\Microsoft Shared\\Web Folders, named IBM Please let BitDefender disinfect your files.

Presence of IBMXXXXX.EXE and IBMYYYYY.DLL (5 digit numbers) in %SystemDir%\\..\\temp or %CommonFilesDir%\\Microsoft Shared\\Web Folders.

Presence of one of the following:

$_3472452.EXE
$_2341233.TMP
$_2341234.TMP
$_2341235.TMP
in the mentioned folders can also be a sign of this malware.

©Virus-Encyclopedia.com All Rights Reserved.