W32/Pakes.PJ Trojan

 Virus Information - W32/Pakes.PJ Trojan:

W32/Pakes.PJ is a trojan. The trojan will infect Windows systems.

The trojan may be dropped by other malware or may be downloaded from remote website by other malware. It may also be downloaded unknowingly by a user while visiting malicious Website.

Upon execution, the trojan drops activeds.exe in the Windows System folder.

The trojan modifies registry at the following location to load itself during each startup:

HKEY_USERS\S-1-5-21-(SID)\Software\Microsoft\Windows\CurrentVersion\Run\activeds