Home Malware Programs Trojans Trojan-Banker.Win32.Qhost.fj

Trojan-Banker.Win32.Qhost.fj

Posted: December 17, 2009

Trojan-Banker.Win32.Qhost.fj is a keylogger program that can monitor all user keystrokes which involve confidential details like username, password, credit card number, etc. Trojan-Banker.Win32.Qhost.fj is capable of hosts file modification that may restrict access to security web sites. Trojan-Banker.Win32.Qhost.fj may be installed via fake or misleading means, without the user's full awareness or agreement.

Aliases

Trojan-PSW.Bancos
Mal/VBBanc-A

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %System%\atual.txt

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]HKEY..\..\..\..{RegistryKeys}GoogleUpdate = ""[file and pathname of the sample #1]""
Loading...