Trojan-PSW.Win32.M2.14.a

tag:Password-stealing Trojans

0 0

This family of Trojan horses is capable of stealing various passwords. Trojans have a program "configurer" (configuration component) that allows malefactors controlling these viruses to adjust server components as they desire.

All trojans work the same way - after OS re-start they copy themselves to the %WinDir% directory, or to the directory %WinDir%\System (depending on the given instructions) and then they register themselves in the system registry.

While operating trojans search disks for files containing passwords for Windows, EDialer, WinCommander, and also can read out a configuration for modem adjustments. In a set time interval they (Trojans) send all collected information to a specified e-mail address.

PSW.M2-family Trojans have an auto-updating function.

Configuration component screen shots - the text displayed is partially in Russian:

previous:Trojan-PSW.VBS.Half
previous:Trojan-PSW.Win32.Aletc

Virus Source from:

New articles

Trojan.PWS.Agent.SGD The malware drops the following files:1) %windir%\system32\hbqqxx.dll- this .dll will be injected in all the running processes and it will try to steal sensitiv...Trojan.PWS.OnlineGames.AABK First of all, the malware deletes the copies of%windir%system32\rpcss.dll (a Windows file) from%windir%\system32\dllcache\rpcss.dlland%windir%\servicepackfiles\...Trojan.PWS.Tupai.ANormal0falsefalsefalseMicrosoftInternetExplorer4st1\:*{behavior:url(#ieooui) }/* Style Definitions */table.MsoNormalTable {mso-style-name:"Table Normal"; mso-ts...Trojan.PWS.Lmir.UMHWhen launched, the trojan drops in %windir%\system32 folder a DLL file having the name derived form an existing DLL from same folder (e.g. rasmanqn3.dll, mdimap...Trojan.PWS.OnlineGames.ZKHThis malware is used to steal user information from online games as qqlogin.exe hx2game.exe and others. The dll file will be injected in every running process. ...

Hot Articles

Trojan-PSW.Win32.M2.14.a

Computer Virus Clounds