Troj/Kango-D is a Trojan for the Windows platform.
Troj/Kango-D includes functionality to access the internet and communicate with a remote server via HTTP.
Troj/Kango-D is a Trojan for the Windows platform.
Troj/Kango-D includes functionality to access the internet and communicate with a remote server via HTTP.
When run Troj/Kango-D generates the fake error message:
"Microsoft Word has generated an error and will be closed!"
Troj/Kango-D installs the following files:
<System>\drivers\kbd.dll - detected as Troj/Kango-D
<System>\drivers\svchost.exe - detected as Mal/Behav-009
<System>\drivers\test.dll - detected as Troj/Kango-D
The following registry entry is created to run Troj/Kango-D on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
service
<System>\drivers\svchost.exe