Home Malware Programs Trojans Trojan.Win32.Scar.ason

Trojan.Win32.Scar.ason

Posted: November 27, 2009

Trojan.Win32.Scar.ason is a malicious Trojan that injects rootkit components into Windows processes to avoid detection. Trojan.Win32.Scar.ason makes changes to Windows Explorer settings and downloads other malicious files from external servers. Trojan.Win32.Scar.ason can monitor user activities to obtain valuable information, specifically login information. Trojan.Win32.Scar.ason is a dangerous threat to any computer or system and should be removed immediately.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %System%\0001d67d.exe
    2 %System%\00035ee0.exe
    3 %System%\5ue7ojui.exe
    4 %Temp%\5ue7ojui.exe
    5 %Temp%\df9f2s1w.exe
    6 %Windir%\1z988v5rus796.exe
    7 %Windir%\20675n5t-a-9irus5z5.ocx
    8 %Windir%\21279spambot3z5.cpl
    9 %Windir%\23951nzt-a-virus4e8.dll
    10 %Windir%\255spyzare26399.cpl

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run][HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*][HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion]HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
Loading...