Troj/Gofmice-A

Category: Viruses and SpywareProtection available since:28 Aug 2010 14:41:05 (GMT)
Type: TrojanLast Updated:28 Aug 2010 14:41:05 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/Gofmice-A is a Trojan for the Windows platform.

Troj/Gofmice-A includes functionality to:

- run automatically
- copy itself to the <System> folder
- access the internet and communicate with a remote server via HTTP

Troj/Gofmice-A communicates via HTTP with the following locations:

anarchyteam . org

When first run Troj/Gofmice-A moves itself to <System>\officeinstl.exe.

The following registry entry is created to run officeinstl.exe on startup:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Microsoft Update
<System>\officeinstl.exe

The following registry entry is set:

HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings
AutoConfigURL
http://park.majesticorps.com