Trojan.Tracur.C

Trojan.Tracur.C Description

Trojan.Tracur.C is a backdoor Trojan and a dropper Trojan that installs browser hijackers, allows remote criminals to take over your PC and alters your firewall to make it ineffectual. Because Trojan.Tracur.C’s backdoor functions allow Trojan.Tracur.C to be reconfigured to make a wide range of different attacks, the symptoms of a Trojan.Tracur.C infection may differ from one another in noticeable ways. However, all Trojan.Tracur.C infections that have been noted so far utilize browser hijacker and firewall-based attacks that expose your browser to multiple sources of infection and leave your computer unable to defend itself against remote attacks. SpywareRemove.com malware researchers recommend that you don’t waste any time in using a competent PC security program to delete Trojan.Tracur.C in a system scan, if you see signs of Trojan.Tracur.C attacks.

Trojan.Tracur.C and Trojan.JS.Redirector.KY: Comrades in Arms (to Your Detriment)

Trojan.Tracur.C installs itself in the form of a BHO or Browser Helper Object and commits itself to running whenever you try to launch a memory process that Trojan.Tracur.C has infected. Since these processes are normal system processes (such as explorer.exe and iexplore.exe) that are used for most Windows systems, this startup routine lets Trojan.Tracur.C launch itself in secret and remain active nearly every second that you use Windows.

Trojan.Tracur.C is often installed by fake Flash updates and similar forms of fraudulent media software updates that contain a concealed Trojan installer.

Once Trojan.Tracur.C is on your system and running, Trojan.Tracur.C will also make sure that Trojan.Tracur.C is not alone; Trojan.Tracur.C infections will also install Trojan.JS.Redirector.KY, a browser hijacker. Trojan.Tracur.C’s browser hijacker will redirect any attempts to use safe search engines towards harmful websites, although this may be easy to overlook, since Trojan.JS.Redirector.KY hides Trojan.JS.Redirector.KY’s attack by injecting JavaScript code into search result links.

The Graver Danger of Trojan.Tracur.C: Criminal Hands on the Wheel

Trojan.Tracur.C can also be used to cause attacks that enable criminals to control your PC from remote servers. Examples of prominent non-browser hijacker attacks that SpywareRemove.com malware researchers have tied to Trojan.Tracur.C include:

Altered firewall settings. Trojan.Tracur.C may create exceptions that allow Trojan.Tracur.C and other types of harmful software to ignore your firewall.
Trojan.Tracur.C may also open your network ports; open ports places your PC in greater danger of being attacked through a network and allows Trojan.Tracur.C to transmit potentially-sensitive information.
Excessive usage of system resources. Since Trojan.Tracur.C injects Trojan.JS.Redirector.KY’s Java code into a normal process and launches itself automatically, your system resources, such as RAM, may be noticeably reduced from normal levels. This can cause lag, stuttering and other quality-of-system-performance issues.
The presence of additional types of harmful programs besides Trojan.Tracur.C’s default Trojan.JS.Redirector.KY browser hijacker. Until you delete Trojan.Tracur.C with the appropriate security programs, Trojan.Tracur.C may install and assist spyware that steal private information, fake security products, worms and other types of malicious software.

Trojan.Tracur.C Automatic Detection Tool (Recommended)

Is your PC infected with Trojan.Tracur.C? To safely & quickly detect Trojan.Tracur.C, we highly recommend you run the malware scanner listed below.

Download SpyHunter's* Malware Scanner to detect Trojan.Tracur.C What happens if Trojan.Tracur.C does not let you open SpyHunter or blocks the Internet?

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:

# File Name Detection Count

1 KBDES32.exe 679

#	File Name	Detection Count
1	KBDES32.exe	679

Registry Modifications

Tutorial: To edit and delete registry entries manually, read the tutorial on how to remove malicious registry entries.

Tip & Warning: Editing and removing the wrong registry keys can severely damage your PC, so remember to backup your Windows Registry! To optimize your Windows Registry and speed up your PC, download RegHunter's registry cleaner.

The following newly produced Registry Values are:
HKEY..\..\..\..{Subkeys}HKCR\.fsharprojHKCR\ZghypcxhleHKCU\Software\Classes\Software\ZghypcxhleHKCU\Software\Zghypcxhle

Posted: September 23, 2011 | By SpywareRemove