Home Malware Programs Trojans Troj_Renos.ACO

Troj_Renos.ACO

Posted: July 30, 2008

Troj_Renos.ACO is a Trojan infection that has the ability to download and install malicious spyware files or programs onto your computer without your consent. One file that Troj_Renos.ACO was discovered to install upon infection is "lphc3pgj0e3ct.exe". The Troj_Renos.ACO infection is nothing to take lightly. It must be removed along with any of the files that it downloaded or installed. Did your desktop background change to display a yellow and blue box that has the following text:

"Warning! Spyware detected on your computer! Install an antivirus or spyware remover to clean your computer."

This message is totally bogus and used only to push you into purchasing a rogue anti-spyware program that the creators of Troj_Renos.ACO promote and sell. What we find to be the most dangerous characteristic of Troj_Renos.ACO is that it can connect to a remote server where remote users may steal your personal information and use it against you. Troj_Renos.ACO may be difficult to manually remove from your computer.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 C:\Windows\System32\blphc3pgj0e3ct.scr
    2 C:\Windows\System32\lphc3pgj0e3ct.exe
    3 C:\Windows\System32\phc3pgj0e3ct.bmp
    4 lphc3pgj0e3ct.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run lphc3pgj0e3ct = "%System%\lphc3pgj0e3ct.exe"
Loading...