Home Malware Programs Trojans W32.Dloader.F!tr

W32.Dloader.F!tr

Posted: April 25, 2006

W32.Dloader.F!tr is a program that downloads and installs software without user permission.

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\WinlogonHKEY..\..\..\..{RegistryKeys}"Shell"=Explorer.exeC:\WINNT\System32\kernels32.exe"System"=C:\WINNT\System32\sysprint.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Loading...