Error » Security Error » Security News » Trojan.Win32.ImSoft

Security News The Latest Computer Security News

Post New Thread Reply
  Trojan.Win32.ImSoft
LinkBack Thread Tools Display Modes
Old 08-Dec-2006, 03:35 AM   #1 (permalink)
Administrator
 
Anilrgowda's Avatar

Posts: 18,715
Join Date: Jan 2006
Rep Power: 10 Anilrgowda is on a distinguished road

IM:
Default Trojan.Win32.ImSoft

Technical details
This Trojan will change the Internet Explorer home page. It is a Windows PE EXE file. The file is 60,416 bytes in size. It is written in Delphi.
Payload
When launched, the Trojan modifies the following registry key value:
[HKCU\Software\Microsoft\Internet Explorer\Main]
"Start Page" = "http://www.im-software.co.uk"
This results in the Internet Explorer home page being changed the http://www.im-software.co.uk
Removal instructions
  1. Use Task Manager to terminate the Trojan process
  2. Delete the original Trojan file (the location will depend on how the program originally penetrated the victim machine).
  3. Revert the Internet Explorer home page to its previous setting.
  4. Update your antivirus databases and perform a full scan of the computer (download a trial version of Kaspersky Anti-Virus).
Anilrgowda is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Spurl this Post!Reddit!
Reply With Quote
   


   
Post New Thread Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
As Trans Win32 Dll 1.1 Cybershot Application Downloads 0 28-Feb-2008 01:41 AM
As Fan Win32 Dll 2.1 Cybershot Application Downloads 0 28-Feb-2008 01:00 AM
Win32/Stration.ADY Anilrgowda Security News 0 13-Jul-2007 04:36 AM
Trojan-Spy.Win32.Banker.asq Anilrgowda Security News 0 08-Dec-2006 03:36 AM
Trojan.Win32.Qhost.hq Anilrgowda Security News 0 08-Dec-2006 03:34 AM


All times are GMT -8. The time now is 11:51 AM.

Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Search Engine Friendly URLs by vBSEO 3.2.0

DMCA Policy

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228