Troj/Ransom-PA

Category: Viruses and Spyware Protection available since:22 Mar 2013 13:06:27 (GMT)
Type: Trojan Last Updated:22 Mar 2013 13:06:27 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/Ransom-PA exhibits the following characteristics:

File Information

Size
128K
SHA-1
fb758072705b9f9fdae3dd337b3dbcca29b9e234
MD5
fcc02e0b4c47f3048ddea85cbaf0f88c
CRC-32
d9b306c2
File type
Windows executable
First seen
2013-03-22

Runtime Analysis

Copies Itself To
  • c:\Documents and Settings\test user\Application Data\skype.dat
Registry Keys Modified
  • HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
    Shell
    explorer.exe,c:\Documents and Settings\test user\Application Data\skype.dat
Processes Created
  • c:\windows\system32\svchost.exe

download Try Sophos products for free
Download now