Packed.Win32.Katusha.o

Packed.Win32.Katusha.o Description

Packed.Win32.Katusha.o is a malicious Trojan which poses a severe threat to a compromised system. Packed.Win32.Katusha.o uses an IRC server to download corrupt files to the computer. Once active, Packed.Win32.Katusha.o will run each time the system is started up after infiltrating the registry. Remove Packed.Win32.Katusha.o immediately once detected.

Aliases

Backdoor.Win32.Cetorp
packed with: PE_Patch.UPX

Packed.Win32.Katusha.o Automatic Detection Tool (Recommended)

Is your PC infected with Packed.Win32.Katusha.o? To safely & quickly detect Packed.Win32.Katusha.o, we highly recommend you run the malware scanner listed below.

Download SpyHunter's* Malware Scanner to detect Packed.Win32.Katusha.o What happens if Packed.Win32.Katusha.o does not let you open SpyHunter or blocks the Internet?

File System Modifications

The following files were created in the system:

# File Name

1 hdyk.exe

2 secupdat.dat

#	File Name
1	hdyk.exe
2	secupdat.dat

Registry Modifications

The following newly produced Registry Values are:
HKEY..\..\..\..{Subkeys}[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]HKEY..\..\..\..{RegistryKeys}MSConfig = “%UserProfile%\hdyk.exe \u”

Posted: July 27, 2010 | By SpywareRemove