Home Malware Programs Dialers TrojanClicker.Win32.Small.jf

TrojanClicker.Win32.Small.jf

Posted: April 25, 2006

TrojanClicker.Win32.Small.jf adds itself as a browser helper object in the Registry and installs additional malware. The primary file is installed in the system root. the file installed was named dh.dll.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 dh.dll
    2 dh.ini
    3 dhu.exe
    4 dhwin1.exe
    5 edb00022.log
    6 precontrol.exe
    7 sk02.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browserhelper
  • The following CLSID's were detected:
    HKEY..\..\{CLSID Path}6001cdf7-6f45-471b-a203-0225615e35a7
Loading...