Troj/DwnLdr-KNF

Category: Viruses and Spyware Protection available since:20 Jan 2013 22:59:59 (GMT)
Type: Trojan Last Updated:20 Jan 2013 22:59:59 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/DwnLdr-KNF exhibits the following characteristics:

File Information

Size
109K
SHA-1
120f5fe38c7bfbe9c05edcfc205e5eb86fd0c4fa
MD5
1cad44dd0a95858acdb1fb1501848aa0
CRC-32
46cd1fd8
File type
Windows executable
First seen
2013-01-20

Runtime Analysis

Registry Keys Created
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Run
    (Default)
    c:\test_item.exe
Registry Keys Modified
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer
    CleanShutdown
    0x00000001
HTTP Requests
  • http://hmhimnknhp.phonewire.info/get.php
IP Connections
  • 184.82.117.41:80
DNS Requests
  • hmhimnknhp.phonewire.info

download Try Sophos products for free
Download now