 |
W32/AntivirusPlus.BZ Trojan
| Name |
W32/AntivirusPlus.BZ Trojan |
| Aliases |
Win32.TRCrypt.XPACK, TrojanDownloader:Win32/Renos.BAO, Fraudtool.AntivirusPlus.V |
| Updated on |
June 12, 2009 |
 Virus Information - W32/AntivirusPlus.BZ Trojan:
W32/AntivirusPlus.BZ is a trojan. The trojan will infect Windows systems.
It displays an attractive interface to entice the user to click on it.
Upon execution, the trojan drops the following files in Windows\system folder:
 kernel32.exe
dop.exe
svchost.exe
It drops the following files in Documents and Settings\Default User\Local Settings\Temporary Internet Files folder:
InternetExplorer[1].dll
AntivirusPlus[1].exe
se[1].exe
It also drops AntivirusPlus.exe in Program Files\Antivirus Plus folder and InternetExplorer.dll in Windows\system32 folder.
The trojan modifies registry at the following location:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
|
