Home Malware Programs Trojans Trojan-PSW.Win32.Papras.air

Trojan-PSW.Win32.Papras.air

Posted: May 3, 2011

Trojan-PSW.Win32.Papras.air is a malicious trojan infection that downloads corrupt files to the local computer that may represent security danger. Trojan-PSW.Win32.Papras.air also enables the attackers gain remote access to the affected PC system and comes together with a keylogger program that can take over all user keystrokes, including personal information, especially bank information, such as usernames, passwords and credit card numbers. Trojan-PSW.Win32.Papras.air is a serious threat for your confidential data, especially your bank information, once your computer is corrupted with this keylogger application. Remove Trojan-PSW.Win32.Papras.air from your PC immediately in order to keep your system away from risk.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Temp%\ddid
    2 %Temp%\winlogon.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]HKEY..\..\..\..{RegistryKeys}winupd32 = "%Temp%\winlogon.exe"
Loading...