Home Malware Programs Trojans Trojan.ShopBot

Trojan.ShopBot

Posted: December 22, 2016

Threat Metric

Threat Level: 8/10
Infected PCs: 23
First Seen: December 22, 2016
Last Seen: January 31, 2020
OS(es) Affected: Windows

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



C:\Users\<username>\AppData\Roaming\Totalcmd\totalcmd64.exe File name: totalcmd64.exe
Size: 124.41 KB (124416 bytes)
MD5: c9a9efe6b6178795d2034218b64673b1
Detection count: 56
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\AppData\Roaming\Totalcmd
Group: Malware file
Last Updated: December 22, 2016

Registry Modifications

The following newly produced Registry Values are:

Regexp file mask%ALLUSERSPROFILE%\Microsoft\Wlansvc\Community\Wlansvc.exe%APPDATA%\Microsoft Services\WUDFHost.exe%APPDATA%\Windows Driver\WUDFHost.exe
Loading...