Trojan.Mdropper.AC
El Trojan.Mdropper.AC es un maligno caballo de Troya capaz de instalarse en el disco duro del sistema infectado para descargar e lanzar software nocivo. Este troyano es parte del resultado engañoso de una amenaza creada por el falso programa contra software espía Personal Antivirus. Los mensajes iniciados por el Personal Antivirus dicen: "Trojan.Mdropper.AC – ¡Se encontró un Troyano!" ....
Detalles del Sistema de Archivos
Trojan.Mdropper.AC puede crear los siguientes archivos:
| # | Nombre |
Detecciones
Detecciones: la cantidad de casos confirmados y sospechosos de una amenaza particular detectada en computadoras infectadas según lo informado por SpyHunter.
|
|---|---|---|
| 1. | %UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe | |
| 2. | %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iv.exe | |
| 3. | %UserProfile%\Application Data\Personal Antivirus\unins000.exe | |
| 4. | %UserProfile%\Application Data\Microsoft\Windows\winlogon.exe | |
| 5. | %Temp%\rundll.exe | |
| 6. | %Program Files%\Personal Antivirus\PerAvir.exe | |
| 7. | %Documents and Settings%\All Users\Start Menu\Programs\Personal Antivirus\Personal Antivirus Home Page.lnk | |
| 8. | %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Personal Antivirus.lnk | |
| 9. | %UserProfile%\Application Data\Personal Antivirus\uill.ini | |
| 10. | %UserProfile%\Application Data\Personal Antivirus\db\config.cfg | |
| 11. | %UserProfile%\Local Settings\Application Data\Microsoft\Windows\log.txt | |
| 12. | %Program Files%\Personal Antivirus\activate.ico | |
| 13. | %Program Files%\Personal Antivirus\uninstall.ico | |
| 14. | %Program Files%\Personal Antivirus\db\DBInfo.ver | |
| 15. | %Program Files%\Personal Antivirus\Languages | |
| 16. | %Program Files%\Personal Antivirus\Languages\IAGer.lng | |
| 17. | %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iGSh.png | |
| 18. | %Documents and Settings%\All Users\Start Menu\Programs\Personal Antivirus | |
| 19. | %Documents and Settings%\All Users\Start Menu\Programs\Personal Antivirus\Purchase License.lnk | |
| 20. | %UserProfile%\Application Data\Personal Antivirus\settings.ini | |
| 21. | %UserProfile%\Application Data\Personal Antivirus\db | |
| 22. | %UserProfile%\Application Data\Personal Antivirus\db\Urls.inf | |
| 23. | %Program Files%\Personal Antivirus | |
| 24. | %Program Files%\Personal Antivirus\unins000.dat | |
| 25. | %Program Files%\Personal Antivirus\db | |
| 26. | %Program Files%\Personal Antivirus\db\ia080618x.db | |
| 27. | %Program Files%\Personal Antivirus\Languages\IAFr.lng | |
| 28. | %WINDOWS%\system32\log.txt | |
| 29. | %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iPSh.png | |
| 30. | %Documents and Settings%\All Users\Desktop\Personal Antivirus.lnk | |
| 31. | %Documents and Settings%\All Users\Start Menu\Programs\Personal Antivirus\Personal Antivirus.lnk | |
| 32. | %UserProfile%\Application Data\Personal Antivirus | |
| 33. | %UserProfile%\Application Data\Personal Antivirus\Uninstall Personal Antivirus.lnk | |
| 34. | %UserProfile%\Application Data\Personal Antivirus\db\Timeout.inf | |
| 35. | %UserProfile%\Local Settings\Application Data\Microsoft\Windows\pguard.ini | |
| 36. | %Program Files%\Personal Antivirus\Explorer.ico | |
| 37. | %Program Files%\Personal Antivirus\working.log | |
| 38. | %Program Files%\Personal Antivirus\db\ia080614.db | |
| 39. | %Program Files%\Personal Antivirus\Languages\IAEs.lng | |
| 40. | %Program Files%\Personal Antivirus\Languages\IAIt.lng | |
| 41. | %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iMSh.png |
Detalles del Registro
Trojan.Mdropper.AC puede crear la siguiente entrada o entradas de registro:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ITGrdEngine
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ITGRDENGINE
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Personal Antivirus"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Personal Antivirus_is1
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer "PrS"
