 |
W32/Spywareremover.E Trojan
| Name |
W32/Spywareremover.E Trojan |
| Aliases |
Win32/Adware.VirusRemover, Trojan.Agent.IRC, Win32/FakeAV.AIN, FakeAV.HTZ. |
| Updated on |
June 19, 2009 |
 Virus Information - W32/Spywareremover.E Trojan:
W32/Spywareremover.E is a trojan. The trojan will infect Windows systems.
Upon execution, the trojan drops the following files in Program Files\SpywareRemover2009 folder:
 ATL80.dll
mfc80.dll
msvcm80.dll
msvcp80.dll
msvcr80.dll
Updater.dll
UserAgent.dll
PP.exe
cn.exe
SR.exe
InstUp.exe
unins000.exe
The trojan modifies registry at the following locations:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
HKEY_USERS\S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXX-XXXX\Software\Microsoft\Windows\ShellNoRoam
|
