Troj/Ransom-SZ

Category: Viruses and Spyware Protection available since:28 Apr 2013 20:58:44 (GMT)
Type: Trojan Last Updated:28 Apr 2013 20:58:44 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/Ransom-SZ exhibits the following characteristics:

File Information

Size
141K
SHA-1
0a29deb2e72a6289990932a9ef6889ff77e33964
MD5
b141560915d777cbd42fbd0e84f8d362
CRC-32
aca364b6
File type
Windows executable
First seen
2011-07-20

Runtime Analysis

Copies Itself To
  • c:\Documents and Settings\test user\Application Data\skype.dat
Registry Keys Modified
  • HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
    Shell
    explorer.exe,c:\Documents and Settings\test user\Application Data\skype.dat
Processes Created
  • c:\windows\system32\svchost.exe

download Try Sophos products for free
Download now