Home Malware Programs Trojans Trojan.Yather

Trojan.Yather

Posted: March 13, 2014

Threat Metric

Threat Level: 9/10
Infected PCs: 112
First Seen: March 13, 2014
Last Seen: July 20, 2022
OS(es) Affected: Windows


Trojan.Yather is a Trojan that may download and execute potentially malicious files on the affected computer system. When executed, Trojan.Yather creates the folder. Trojan.Yather then creates the potentially infected files on the PC. Trojan.Yather also creates the registry entry. Trojan.Yather connects to the remote location. Trojan.Yather may then carry out the malicious activities, such as download and execute files from remote locations. Trojan.Yather allows cybercriminals to obtain remote unauthorized access and control over the targeted PC.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%UserProfile%\Application Data\sjacdasbweourvn\kruohrflnh.exe File name: %UserProfile%\Application Data\sjacdasbweourvn\kruohrflnh.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
%UserProfile%\Application Data\sjacdasbweourvn\nymgtpoqc.exe File name: %UserProfile%\Application Data\sjacdasbweourvn\nymgtpoqc.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\{Value}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\"Application Locator Session Logs Redirector" = "%UserProfile%\Application Data\sjacdasbweourvn\nymgtpoqc.exe" HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\"Application Locator Session Logs Redirector" = "%UserProfile%\Application Data\sjacdasbweourvn\nymgtpoqc.exe" Captainstrong.net/forum/searc[REMOVED]
Loading...