Troj/DNSChan-MW is a Trojan for the Windows platform.
Troj/DNSChan-MW includes functionality to:
- steal confidential information
- access the internet and communicate with a remote server via HTTP
Troj/DNSChan-MW modifies the <System>\drivers\etc\hosts file to hijack connections to "craigslist .org" URLs.
When Troj/DNSChan-MW is installed the following files are created:
<System>\drivers\etc\pic.url