Trojan.Win32.sm!a
The badware is destined for unauthorized installation on the targeted PC. The very process of installation is carried out for computer owner. This kind of malicious programs прописывать some insecure files on the disk (mainly in Windows catalogue or in system catalogue of the Windows etc) and launches them.
The applications of this sort serve as a tool for the hackers to “kill two birds in one stone”: they install Trojan software invisibly and steal the private information.
Technical details
The Trojan program that installs other dangerous programs on the computer-victim. It is a Windows application (PE-EXE file). Its size is 319488 bytes. It is developed with C++. The reputable anti-viruses identify it as : TR/Dropper.VB.Gen, Trojan.Gen, Win32/VBGenerated!generic, TROJ_GEN.R37B5F6, Trojan.Win32.Generic!BT
Destructive activity
If Trojan is launched it copies itself to the system:
• %AppData%\windll.exe
• %Temp%\svchost.exe
And ads itself to autostart
HKCU\...\Run\Windows Host Processor %Temp%\svchost.exe
If your PC has been infected with this malware, you should take the following measures:
1. Reboot your PC in the safe mode (in the very beginning of the reboot process, press the button "F8" with non-stop clicking and select "Safe Mode" in the Windows download menu)
2. Remove the original file of the Trojan (its location depends on the way the virus entered the targeted PC)
• Delete System Registry entries:
HKCU\...\Run\Windows Host Processor %Temp%\svchost.exe
3. Delete files:
• %AppData%\windll.exe
• %Temp%\svchost.exe
Upload GridinSoft Trojan Killer to implement the system checkup for virus presence. Make sure to update the GridinSoft Trojan Killer virus database to provide the effective removal of any spotted malwares.
Trojan.Win32.sm!a malware remover:
No comments:
Post a Comment