Home / malwarePDF  

Trojan:Win32/Wintrim.G


First posted on 07 April 2009.
Source: SecurityHome

Aliases :

Trojan:Win32/Wintrim.G is also known as Also Known As:Packed.Win32.Krap.m (Kaspersky), Trojan.Generic.1310276 (BitDefender), Win32/Adware.Boran (ESET), Win32/Superid!Adware (CA), Trojan.Win32.Agent.afht (Kaspersky), Generic Downloader.x (McAfee).

Explanation :

Trojan:Win32/Wintrim.G is a component of the greater Win32/Wintrim family that is used for downloading and installing additional Wintrim components. Win32/Wintrim is a family of trojans that display pop-up advertisements depending on the user's keywords and browsing history. Its variants can also monitor the user's activities, download applications, and send system information back to a remote server.

Symptoms
System ChangesThe following system changes may indicate the presence of this malware:

  • The display of the following dialogs (for example):




    • Trojan:Win32/Wintrim.G is a component of the greater Win32/Wintrim family that is used for downloading and installing additional Wintrim components. Win32/Wintrim is a family of trojans that display pop-up advertisements depending on the user's keywords and browsing history. Its variants can also monitor the user's activities, download applications, and send system information back to a remote server.

    Installation
    Trojan:Win32/Wintrim.G may be offered in the wild masquerading as a number of different applications, including the following examples:WEB-MEDIAPLAYER
    Speed Downloading
    The producers of this family of malware rely on social engineering techniques to get users to install these applications.

    Payload
    Downloads and Executes Arbitrary FilesWhen executed the installer downloads files to %programfiles%<Application Name>, but also downloads a trojan to %APPDATA%<random name>.exe and executes it. The installer may then open a successfully install message in the browser, for example: Additional InformationFor more information, please see the Win32/Wintrim family description elsewhere in our encyclopedia.

    Analysis by Ray Roberts

    Last update 07 April 2009

     

    TOP

    Malware :

    Family: