Home Malware Programs Backdoors Backdoor.Smadow.gen!A

Backdoor.Smadow.gen!A

Posted: July 18, 2011

Backdoor.Win32/Smadow.gen!A is a harmful backdoor Trojan that can download and execute arbitrary files without your knowledge and is used to serve online advertisements. Backdoor.Win32/Smadow.gen!A is able to install on your computer system without your consent. Backdoor.Win32/Smadow.gen!A modifies registry entries to invade the affected computer. Backdoor.Win32/Smadow.gen!A shows a pop-up error, and when clicked on the error it redirects the user to download malicious program or the program gets executed by Backdoor.Win32/Smadow.gen!A. Backdoor.Win32/Smadow.gen!A gives backdoor access to remote attackers to steal a victim's personal information such as login details, credit card information, etc. Backdoor.Win32/Smadow.gen!A is an identified security risk and you need to remove it immediately when you detect it.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %AppData%\\{5E4E0482-F9E5-3F8D-1ABD-0A82AB713F82}\\.exe
    2 .exe
    3 csrss.exe
    4 questscan143.exe
    5 stpass.exe
    6 ZiggyTVSvc.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings 'ProxyOverride' = ''HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System 'DisableTaskMgr' = '1'HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\.shell
Loading...