Home Malware Programs Trojans Trojan.DR.Webmoner.Gen.2

Trojan.DR.Webmoner.Gen.2

Posted: January 3, 2011

Trojan.DR.Webmoner.Gen.2 is a harmful Trojan that spreads via malicious emails and infected internet downloads. On infecting a system, Trojan.DR.Webmoner.Gen.2 will harvest a victim's keystrokes and harvest passwords or other confidential information. Trojan.DR.Webmoner.Gen.2 will also give remote attackers access to the system and allow additional malware onto the system. Remove Trojan.DR.Webmoner.Gen.2 from your system as soon as possible.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %AppData%\addon.dat
    2 %AppData%\addons.dat
    3 %System%\Bifrost\logg.dat
    4 %System%\Bifrost\server.exe
    5 %System%\SiLeNtt\klog.dat
    6 %System%\SiLeNtt\server.exe
    7 %Temp%\FreezMail v1.9.exe
    8 %Temp%\FreezMail v1.9_u.exe
    9 %Temp%\lol.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\BifrostHKEY_CURRENT_USER\Software\SiLeNttHKEY_LOCAL_MACHINE\SOFTWARE\BifrostHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9B71D88C-C598-4935-C5D1-43AA4DB90836}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9D71D88C-C598-4935-C5D1-43AA4DB90836}HKEY_LOCAL_MACHINE\SOFTWARE\SiLeNttHKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\msvideoHKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MediaResources\msvideostubpath = "%System%\Bifrost\server.exe s"stubpath = "%System%\SiLeNtt\server.exe s"
Loading...