Hotword
Hotword is a dangerous trojan that logs user keystrokes, steals computer information and gives the attacker unauthorized remote access to a compromised PC. It sends gathered data by e-mail or uploads it to predetermined FTP servers. The intruder can use Hotword to terminate running processes, download and run arbitrary files, capture screenshots of user activity, send e-mail messages or update the trojan. Hotword is able to bypass Windows Firewall. The trojan automatically runs on every Windows startup.
File System Modifications
- The following files were created in the system:
# File Name 1 [X]svchost.exe 2 explore.exe 3 login.lnk 4 mmsystem.dlx 5 vzzpkghva.crb 6 windll-objectswin*.dlx
Registry Modifications
- The following newly produced Registry Values are:
HKEY..\..\..\..{RegistryKeys}HKEY_CURRENT_USERSoftwareMicrosoftWindowsWUHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunloginegedit
Leave a Reply
Please note that we are not able to assist with billing and support issues regarding SpyHunter or other products. If you're having issues with SpyHunter, please get in touch with SpyHunter customer support through your SpyHunter . If you have SpyHunter billing questions, we recommend you check the Billing FAQ. For general suggestions or feedback, contact us.