Trojan.Loopas.C!inf

Trojan.Loopas.C!inf Description

Trojan.Loopas.C!inf is a Trojan and detection for files that are affected by the Trojan.Loopas family of PC threats. Trojan.Loopas.C!inf may spread as a CHM (help) file that dowmloads the malicious payload. Once executed, Trojan.Loopas.C!inf copies itself as the certain file. Trojan.Loopas.C!inf also drops potentially malicious files. Trojan.Loopas.C!inf then corrupts the particular file to launch the main file of the Trojan. Trojan.Loopas.C!inf then deletes numerous files. Trojan.Loopas.C!inf then modifies the Windows Registry.Trojan.Loopas.C!inf steals personal information from the infected computer, such as computer name, environment variables and IP address. The Trojan.Loopas.C!inf tries to access the domain called mail.winxps.com.

Trojan.Loopas.C!inf Automatic Detection Tool (Recommended)

Is your PC infected with Trojan.Loopas.C!inf? To safely & quickly detect Trojan.Loopas.C!inf, we highly recommend you run the malware scanner listed below.

Download SpyHunter's* Malware Scanner to detect Trojan.Loopas.C!inf What happens if Trojan.Loopas.C!inf does not let you open SpyHunter or blocks the Internet?

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:

#	File Name
1	%CommonProgramFiles%\odbc.nls
2	%CommonProgramFiles%\odbc_lif.nls
3	%CommonProgramFiles%\odbc_orp.nls
4	%CommonProgramFiles%\odbc_dmc.nls
5	%CommonProgramFiles%\odbc_res.nls
6	%CommonProgramFiles%\odbc_rcs.nls
7	%CommonProgramFiles%\odbc_ger.nls
8	%CommonProgramFiles%\odbc_rehto.nls
9	%CommonProgramFiles%\odbc_div.nls
10	%CommonProgramFiles%\odbc_txe.nls
11	%CommonProgramFiles%\dumpodbc.exe
12	%System%\udpmon_old.dll
13	%System%\spoolss.dll (Trojan.Loopas!inf)
14	%Temp%\s[FIVE RANDOM NUMBERS].dat

Registry Modifications

Tutorial: To edit and delete registry entries manually, read the tutorial on how to remove malicious registry entries.

Tip & Warning: Editing and removing the wrong registry keys can severely damage your PC, so remember to backup your Windows Registry! To optimize your Windows Registry and speed up your PC, download RegHunter's registry cleaner.

The following newly produced Registry Values are:
HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Spooler\"FailureActions" = "[BINARY DATA]"

Posted: July 5, 2012 | By SpywareRemove