Home Malware Programs Trojans Trojan.Fakefrag

Trojan.Fakefrag

Posted: May 24, 2011

Trojan.Fakefrag is a terrible computer Trojan that will download and install rogue programs on the affected computer. Trojan.Fakefrag also will show fake alert messages about hard drive failurea. Trojan.Fakefrag will convince the targeted users to purchase the registered version of an offered application. Trojan.Fakefrag is a dangerous security risk to your PC and has to be terminated immediately.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 C:\Documents and Settings\All Users\Application Data\[RANDOM CHARACTERS].exe
    2 C:\Documents and Settings\All Users\Application Data\[SIX RANDOM CHARACTERS FILE NAME ONE]
    3 C:\Documents and Settings\All Users\Application Data\[SIX RANDOM CHARACTERS FILE NAME ONE].exe
    4 C:\Documents and Settings\All Users\Application Data\[SIX RANDOM CHARACTERS FILE NAME TWO]
    5 C:\Documents and Settings\All Users\Application Data\[SIX RANDOM CHARACTERS FILE NAME TWO].exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage\"Favorites" = "FF"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop\"NoChangingWallpaper" = "1"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\"NoDesktop" = "1"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\"[RANDOM CHARACTERS]" = "%SystemDrive%\Documents and Settings\All Users\Application Data\[RANDOM CHARACTERS].exe"
Loading...