Home / malware

PDF

Trojan.Fotomoto.A

First posted on 21 November 2011.
Source: BitDefender

Aliases :

There are no other names known for Trojan.Fotomoto.A.

Explanation :

Trojan.Fotomoto.A is an trojan with adware functionality. When installed this version performs the following actions:

a) It connects to an internet server and reports some basic informations about the infected computer, then receives some informations from server, informations stored in a database on that server. Those informations include a date when that computer was added to that database and other unidentified yet.

b) It modifies the following registry entry:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogon"SFCDisable" = "4"

c) If modifies the following registry entry:
HKEY_LOCAL_MACHINESytemCurentControlSetServicesRun"DomaineService" = path to trojan

Last update 21 November 2011

 

TOP