Trojan.Win32.ImSoft

tag:Trojan Spy

When launched, the Trojan modifies the following registry key value:

[HKCU\Software\Microsoft\Internet Explorer\Main]
"Start Page" = "http://www.im-software.co.uk"

This results in the Internet Explorer home page being changed the http://www.im-software.co.uk

Use Task Manager to terminate the Trojan process
Delete the original Trojan file (the location will depend on how the program originally penetrated the victim machine).
Revert the Internet Explorer home page to its previous setting.
Update your antivirus databases and perform a full scan of the computer (download a trial version of Kaspersky Anti-Virus).

This Trojan will change the Internet Explorer home page. It is a Windows PE EXE file. The file is 60,416 bytes in size. It is written in Delphi.

Payload

previous:Trojan-Spy.Win32.VB.oq
previous:TrojanSpy.Win32.Montp.l

Virus Source from:

New articles

TSPY_ZBOT.XMASThis spyware may be dropped by other malware. It may be unknowingly downloaded by a user while visiting malicious websites. It may be downloaded from remote ...Trojan.Win32.FraudPack.bgveThis Trojan is designed to install and launch other programs on the victim machine without the knowledge or consent of the user. It is a Windows PE EXE file. ...Sinowal.VXRSinowal.VXR is a Trojan designed to steal information related to certain British banking entities. It obtains confidential information related to users' login f...Trojan.Spy.ZBot.EHAt execution this malware is a trojan that copies itself in %WINDIR%\system32\ntos.exe (or C:\Documents and settings\%username%\Application Data\) and he will c...Trojan.Spy.Webmoner.CE-In order to outwit the user, the fileofen has an icon of an installeror of a well-known file type(e.g. Media Player files, IE files); also, it may have names l...

Hot Articles

Trojan.Win32.ImSoft

Computer Virus Clounds