Backdoor.Wisti
Backdoor.Wisti Description
Backdoor.Wisti is a backdoor Trojan that opens a back door on the infected computer. Backdoor.Wisti usually spreads via malicious PDF files. Once executed, Backdoor.Wisti can create malicious files and modify the Windows Registry. Backdoor.Wisti may connect to numerous URLs. Backdoor.Wisti connects to a command-and-control (C&C) server in order to receive instructions from attackers. Backdoor.Wisti allows attackers to collect computer system and PC user’s information and retrieve Internet Explorer and Firefox configuration data.
Backdoor.Wisti Automatic Detection Tool (Recommended)
Is your PC infected with Backdoor.Wisti? To safely & quickly detect Backdoor.Wisti, we highly recommend you run the malware scanner listed below.
Download SpyHunter's* Malware Scanner to detect Backdoor.Wisti
What happens if Backdoor.Wisti does not let you open SpyHunter or blocks the Internet?
Technical Details
File System Modifications
Tutorials: If you wish to learn how to remove malware components manually, you can read
the tutorials on how to find malware,
kill unwanted processes,
remove malicious DLLs and
delete other harmful files. Always be
sure to back up your PC before making any changes.
- The following files were created in the system:
# File Name 1 %Temp%\lass.exe 2 %Temp%\csrss.exe 3 %Temp%\svchost.exe 4 %Windir%\~00ELISE1D797.TMP 5 %UserProfile%\Application Data\Microsoft\Network\msscrt726.dll
Registry Modifications
Tutorial: To edit and delete registry entries manually, read the tutorial on
how to remove malicious registry entries.
Tip & Warning: Editing and removing the wrong registry keys can severely damage your PC, so remember to backup your Windows Registry! To optimize your Windows Registry and speed up your PC, download RegHunter's registry cleaner.
Tip & Warning: Editing and removing the wrong registry keys can severely damage your PC, so remember to backup your Windows Registry! To optimize your Windows Registry and speed up your PC, download RegHunter's registry cleaner.
- The following newly produced Registry Values are:
HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\stisvc
Posted: September 19, 2012 | By SpywareRemove
Share:
Threat Level: 6/10
Rate this article:
Detection Count: 197


More
