Home Malware Programs Trojans Infticker

Infticker

Posted: March 28, 2006

Infticker is a trojan that shows a ticker bar across the top of the screen. This ticker states that the computer is infected and asks to click on it for help. Once the user clicks on the ticker, the trojan opens Internet Explorer and accesses a predefined web site, which offers three infamous corrupt anti-malware applications including SpySheriff, RazeSpyware and SpyFighter. When the user tries to close the ticker, the trojan shows the following warning message:

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun[filename]
  • The following CLSID's were detected:
    HKEY..\..\{CLSID Path}43B3C583-43B3-C7D7-0000-000B43B3EFB9
Loading...