Home / malware

PDF

Trojan.FakeAlert.BRG

First posted on 21 November 2011.
Source: BitDefender

Aliases :

Trojan.FakeAlert.BRG is also known as Trojan.Win32.FraudPack.

Explanation :

Once started, it moves itself to C:Documents and SettingsAll UsersApplication Dataxxxxxxxxxxxxxxxx.exe, where xxxxxxxx is a 8 letter name containing only numerical digits, and starts from this location.

Adds an entry in the registry, in key HKLMSOFTWAREMicrosoftWindowsCurrentVersionRun, with the name xxxxxxxx, and containing the path where it has moved. This makes it run at Windows startup.

Last update 21 November 2011

 

TOP