MALWARE WATCH

Last 10 pages of virus/malware analyzed from the TG Soft’s C.R.A.M. team.

1. 18/08/2020 - Adware.Win32.CloudPrinter.A: Adware
2. 26/06/2020 - Trojan.Win32.GootKit.DC: Trojan
3. 23/04/2020 - Trojan.JS.Dropper.CDN: Trojan
4. 13/03/2020 - Adware.Win32.MyPCBackup.B: Adware
5. 05/08/2019 - Trojan.Win32.Gootkit.CZ: Trojan
6. 05/08/2019 - Trojan.Win32.Gootkit.CY: Trojan
7. 31/07/2019 - Trojan.Win32.Gootkit.BPR: Trojan
8. 30/07/2019 - Trojan.Win32.Gootkit.BPP: Trojan
9. 29/07/2019 - Trojan.Win32.Cutwail.BPO: Trojan
10. 29/07/2019 - Trojan.Win32.Cutwail.BPN: Trojan

Card malware: Trojan.Win32.Banker.CAS

• Nome: Trojan.Win32.Banker.CAS
• Tipologia: Trojan

• Data: 19/01/2017
• Nome file: OHJTYFCGP.EXE
• Esecuzione Automatica: {6DC1E7E1-BD35-E285-2F2A-B92CED95FC11}
• Dimensioni: 299008 byte
• MD5: c7420d7aa3c61530b776bca1da462afc
• Descrizione:
  Il Trojan.Win32.Banker.CAS si copia in %USERPROFILE%\APPDATA\ROAMING\{912E1EB7-AADF-A38E-AF38-B669A3A4C9EF}\OHJTYFCGP.EXE
  Modifica la seguente chiave di registro:
  HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
  [{6DC1E7E1-BD35-E285-2F2A-B92CED95FC11}] = %USERPROFILE%\APPDATA\ROAMING\{912E1EB7-AADF-A38E-AF38-B669A3A4C9EF}\OHJTYFCGP.EXE
  
• Descrizione file: Diversity Ziatech
• Società: Repkasoft
• Nome prodotto: Stress Chkdsk
• Nome file originale: Stress Chkdsk
• Copyright: (C)Repkasoft
• Note aggiuntive: Rimosso da VirIT 8.3.46 e successivi.

Copyright© 2004-2024 Windows Startup Applications Malware. All rights reserved TG Soft.