Home Malware Programs Trojans Trojan-PSW.Win32.QQPass.akt

Trojan-PSW.Win32.QQPass.akt

Posted: October 20, 2009

Trojan-PSW.Win32.QQPass.akt is a trojan that has the ability to steal confidential details like usernames, passwords, and credit card numbers. Trojan-PSW.Win32.QQPass.akt can send out email message(s) with the built-in SMTP client engine. Also, Trojan-PSW.Win32.QQPass.akt registers a 32-bit in-process server DLL. Trojan-PSW.Win32.QQPass.akt is a security risk; therefore, users should eliminate this threat at once. The presence of Trojan-PSW.Win32.QQPass.akt may lead to data loss or other fault which includes performance degradation.

Aliases

Mal/Behav-214 (Sophos)Trojan-Dropper.Delf (Ikarus)Win-Trojan/QQPass.Gen (AhnLab)

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %System%\BT.BAT
    2 [pathname with a string SHARE]\atmQQ2.dll

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7147BD02-68AB-E135-89BD-023579BCE135}HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7147BD02-68AB-E135-89BD-023579BCE135}\InProcServer32
Loading...