Troj/Inject-MH is a Trojan for the Windows platform.
Troj/Inject-MH includes functionality to:
- modify personal firewall settings
- run automatically
- access the internet and communicate with a remote server via HTTP
When Troj/Inject-MH is installed it creates the file <Windows>\infocard.exe.
The following registry entry is set, affecting internet security:
HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List
c:
sample.exe
The following registry entry is set:
HKCU\Software\Microsoft\Internet Explorer
Main
Start Page