Home Malware Programs Trojans Trojan.Katslo.A

Trojan.Katslo.A

Posted: September 13, 2012

Threat Metric

Threat Level: 8/10
Infected PCs: 26
First Seen: September 13, 2012
OS(es) Affected: Windows

Aliases

Suspicious file [Panda]Worm/Generic2.CDWZ [AVG]Trojan-Downloader.Win32.CodecPack [Ikarus]Trojan/Win32.Birele [AhnLab-V3]Gen:Variant.Kazy.80228 [GData]TR/Dldr.CodecPack.bars [AntiVir]Trojan.PWS.Gamania.35757 [DrWeb]Gen:Variant.Kazy.80233 [BitDefender]Trojan-Downloader.Win32.CodecPack.bars [Kaspersky]Win32/AutoRun.IRCBot.IO [NOD32]PWS-Zbot.gen.aey [McAfee]Dropper.Generic6.BBFO [AVG]W32/Kryptik.AJPH!tr [Fortinet]Trojan:Win32/Katslo.A [Microsoft]Mal/EncPk-AER [Sophos]
More aliases (28)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%LOCALAPPDATA%\Microsoft\Windows\3745\VaultCredProvider.exe File name: VaultCredProvider.exe
Size: 196.6 KB (196609 bytes)
MD5: 75398adc21ff76dc024a5ca4eb6e6171
Detection count: 14
File type: Executable File
Mime Type: unknown/exe
Path: %LOCALAPPDATA%\Microsoft\Windows\3745
Group: Malware file
Last Updated: September 17, 2012
%APPDATA%\Skype\peter.jackson15\chatsync\10\Netplwiz.exe File name: Netplwiz.exe
Size: 217.08 KB (217088 bytes)
MD5: 1a936319ea2d4358e60c1dfc2c0d5c62
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\Skype\peter.jackson15\chatsync\10
Group: Malware file
Last Updated: September 14, 2012
Loading...