Troj/Injector-B is a Trojan for the Windows platform.
Troj/Injector-B includes functionality to:
- run automatically
- modify personal firewall settings
- access the internet and communicate with a remote server via HTTP
Troj/Injector-B communicates via HTTP with the following locations:
browseusers . myspace . com
When Troj/Injector-B is installed it creates the file <Windows>\infocard.exe.
The following registry entry is set, affecting internet security:
HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List
sample.exe
The following registry entry is set:
HKCU\Software\Microsoft\Internet Explorer
Main
Start Page