Home Malware Programs Trojans Jupillites

Jupillites

Posted: March 28, 2006

Jupillites is a trojan that attacks predefined remote PCs and runs hidden proxy service on a compromised computer. It also collects computer information and sends it to certain web server. Jupillites can update itself via the Internet.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 atiupdl.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunatiupdpl=%System%atiupdpl.exeHKEY_LOCAL_MACHINESOFTWAREMicrosoftATI_VERHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunServicesatiupdpl=%System%atiupdpl.exeHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunatiupdpl=%System%atiupdpl.exe
Loading...