Home Malware Programs Trojans Trojan-Ransom.Win32.Losya

Trojan-Ransom.Win32.Losya

Posted: December 24, 2010

Trojan-Ransom.Win32.Losya is a malicious Trojan virus created by cyber-criminals to install and initiate other versions of malicious programs on the victim's PC. Trojan-Ransom.Win32.Losya is included in a list of programs which will run automatically when the operating system starts. This makes it very difficult to manually detect and remove Trojan-Ransom.Win32.Losya. A spyware removal tool should be used to safely detect and remove Trojan-Ransom.Win32.Losya before it is able to cause additional damages to the affected system.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 c:\winntlsmss.exe\config.bin
    2 c:\winntlsmss.exe\winntlsmss.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1][HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3][HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4][HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0][HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1][HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2][HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3][HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4][HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]HKEY..\..\..\..{RegistryKeys}1406 =1609 =WarnOnPost =
Loading...