Home Malware Programs Trojans Trojan.Swaylib

Trojan.Swaylib

Posted: February 15, 2013

Threat Metric

Threat Level: 9/10
Infected PCs: 47
First Seen: February 15, 2013
Last Seen: June 25, 2024
OS(es) Affected: Windows

Trojan.Swaylib is a Trojan that downloads additional malware threats onto the targeted computer system. When Trojan.Swaylib is executed, it creates the malevolent files. Trojan.Swaylib then creates the registry subkey. Trojan.Swaylib creates the registry entries. Trojan.Swaylib contacts the remote location. Trojan.Swaylib allows attackers to gain full remote access and control over the infected computer system.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



3a2547af14b5621f43481a70f32ccef3 File name: 3a2547af14b5621f43481a70f32ccef3
Size: 453.63 KB (453632 bytes)
MD5: 3a2547af14b5621f43481a70f32ccef3
Detection count: 72
Group: Malware file
Last Updated: February 25, 2013
d05ff92f3b487aed1133e52b439fa5c9 File name: d05ff92f3b487aed1133e52b439fa5c9
Size: 1.51 MB (1519614 bytes)
MD5: d05ff92f3b487aed1133e52b439fa5c9
Detection count: 70
Group: Malware file
Last Updated: February 25, 2013
LANGBAR32.dl_ File name: LANGBAR32.dl_
Size: 250.88 KB (250880 bytes)
MD5: 97777f269ae807891dac4b388c66a952
Detection count: 69
Mime Type: unknown/dl_
Group: Malware file
Last Updated: February 25, 2013
6f7c04de937a728b0b497f058f31aeeb File name: 6f7c04de937a728b0b497f058f31aeeb
Size: 458.75 KB (458752 bytes)
MD5: 6f7c04de937a728b0b497f058f31aeeb
Detection count: 68
Group: Malware file
Last Updated: February 25, 2013
%ALLUSERSPROFILE%\IMPACT\components\modules\exploits\install\bin\CVE_2013_0641.dll File name: CVE_2013_0641.dll
Size: 46.08 KB (46080 bytes)
MD5: cb33e97f46a219804ddb373ff982d694
Detection count: 23
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\IMPACT\components\modules\exploits\install\bin\CVE_2013_0641.dll
Group: Malware file
Last Updated: June 25, 2024
%UserProfile%\Application Data\cache\LangBar32.dll File name: %UserProfile%\Application Data\cache\LangBar32.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
%Temp%\L2P.T File name: %Temp%\L2P.T
Mime Type: unknown/T
Group: Malware file

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\{Value}HKEY_CURRENT_USER\Software\Microsoft\CTF\LangBarAddIn\[CLSID]\"Enable" = "0x1"HKEY_CURRENT_USER\Software\Microsoft\CTF\LangBarAddIn\[CLSID]\"FilePath" = "%UserProfile%\Application Data\cache\LangBar32.dll"HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Multimedia\Other\"UT"
Loading...