This type of trojan contains one or more malicious programs, which it will secretly install and execute.
Based on the settings of your F-Secure security product, it will either move the file to the quarantine where it cannot spread or cause harm, or remove it.
This malware drops a malicious file that steals credentials from Internet banking websites.
The following component is injected into the iexplorer.exe process:
The injected code is registered as an Internet Explorer Browser Helper Object (BHO). This injected code is the main component file that allows the malware to steal passwords from Internet Explorer's auto-complete passwords cache.The malware also attempts to connect to a remote server and download files:
Creates these files:
Modified these files:
Sets these values:
Creates these keys:
Date Created: -
Date Last Modified: -