Troj/Ransom-TH

Category: Viruses and Spyware Protection available since:05 May 2013 23:59:24 (GMT)
Type: Trojan Last Updated:05 May 2013 23:59:24 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/Ransom-TH exhibits the following characteristics:

File Information

Size
57K
SHA-1
7666db1c0a3376d9b3c5052f82c57ee686ff9f45
MD5
4e8ea3a4c1c9443735f53b36bb05e3d2
CRC-32
aaab11b6
File type
Windows executable
First seen
2013-05-05

Runtime Analysis

Copies Itself To
  • c:\Documents and Settings\test user\Application Data\skype.dat
Registry Keys Modified
  • HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
    Shell
    explorer.exe,c:\Documents and Settings\test user\Application Data\skype.dat
Processes Created
  • c:\windows\system32\svchost.exe

download Try Sophos products for free
Download now