Home Malware Programs Trojans Rivarts

Rivarts

Posted: March 28, 2006

Rivarts is a dangerous trojan designed to steal bank account details and user sensitive information.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 mc[X].tmp
    2 wscntfy.exe
    3 zsys.exe
    4 zsys1.dll
    5 zsys2.db
    6 zsys2.dll

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunzsysHKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesmchinjdrv
Loading...