Home Malware Programs Trojans Trojan.Exprez

Trojan.Exprez

Posted: May 24, 2012

Threat Metric

Threat Level: 9/10
Infected PCs: 51
First Seen: May 24, 2012
OS(es) Affected: Windows

Trojan.Exprez is a Trojan that executes harmful actions on the infected computer. Once installed, Trojan.Exprez downloads malicious files. Trojan.Exprez also downloads the certain file shortcut so that it can run automatically every time you start Windows. This file shortcut will run the certain file. Trojan.Exprez stops the 'taskmgr.exe' process. Trojan.Exprez tries to alter .doc files found in the particular folder %CurrentFolder%. Trojan.Exprez tries to connect to the specific domains.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



file.exe File name: file.exe
Size: 191.45 KB (191459 bytes)
MD5: 36a826d82b9458c4989dfd80aa9b42b5
Detection count: 39
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: May 29, 2012
file.exe File name: file.exe
Size: 121.34 KB (121344 bytes)
MD5: 83a0af2c89e530ec289a21746f003f53
Detection count: 38
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: May 29, 2012
file.exe File name: file.exe
Size: 1.95 MB (1951120 bytes)
MD5: 162d4d166ab79b4a3c824d60fd7ebadf
Detection count: 37
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: May 29, 2012
file.exe File name: file.exe
Size: 492.09 KB (492097 bytes)
MD5: 67811b4fa4597218c8269979c820cf7a
Detection count: 35
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: May 29, 2012
file.exe File name: file.exe
Size: 715.59 KB (715595 bytes)
MD5: ca77390da44f812b9cecda6d59f459c3
Detection count: 31
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: May 29, 2012
%USERPROFILE%\Start Menu\Programs\Startup\[NINE RANDOM UPPER CASE CHARACTERS].lnk File name: %USERPROFILE%\Start Menu\Programs\Startup\[NINE RANDOM UPPER CASE CHARACTERS].lnk
File type: Shortcut
Mime Type: unknown/lnk
Group: Malware file
%UserProfile%\Application Data\Microsoft\[NINE RANDOM UPPER CASE CHARACTERS].exe -launcher File name: %UserProfile%\Application Data\Microsoft\[NINE RANDOM UPPER CASE CHARACTERS].exe -launcher
Mime Type: unknown/exe -launcher
Group: Malware file
%UserProfile%\Application Data\Microsoft\[NINE RANDOM UPPER CASE CHARACTERS].exe File name: %UserProfile%\Application Data\Microsoft\[NINE RANDOM UPPER CASE CHARACTERS].exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
%CurrentFolder%\[FIVE RANDOM UPPER CASE CHARACTERS].doc File name: %CurrentFolder%\[FIVE RANDOM UPPER CASE CHARACTERS].doc
Mime Type: unknown/doc
Group: Malware file
%CurrentFolder%\[FIVE RANDOM UPPER CASE CHARACTERS].doc File name: %CurrentFolder%\[FIVE RANDOM UPPER CASE CHARACTERS].doc
Mime Type: unknown/doc
Group: Malware file
%UserProfile%\Application Data\Microsoft\ntuser.dat File name: %UserProfile%\Application Data\Microsoft\ntuser.dat
File type: Data file
Mime Type: unknown/dat
Group: Malware file
%UserProfile%\Application Data\Microsoft\ntuser.ini File name: %UserProfile%\Application Data\Microsoft\ntuser.ini
Mime Type: unknown/ini
Group: Malware file
%UserProfile%\Application Data\Microsoft\ntuser.inf File name: %UserProfile%\Application Data\Microsoft\ntuser.inf
Mime Type: unknown/inf
Group: Malware file
%Windir%\xpsp2res.dll File name: %Windir%\xpsp2res.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file

Related Posts

Loading...