Home Malware Programs Trojans Satiloler.b

Satiloler.b

Posted: March 28, 2006

Satiloler.b is a trojan designed to steal user sensitive information.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 divx.ini
    2 lsass.exe
    3 sfc.dll
    4 sfc_os.dll
    5 userinit.exe
    6 xvid.dll
    7 xvid.ini

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunsystemHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsNTCurrentVersionWinlogonSFCDisable=FFFFFF9DHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsNTCurrentVersionWinlogonSFCScan=0HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsNTCurrentVersionWinlogonsystem
Loading...