Troj/Puper-AD

Category: Viruses and Spyware
Type: Trojan
Prevalence: No Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/Puper-AD is a Trojan for the Windows platform.

When Troj/Puper-AD is installed the following files are created:

<User>\Application Data\Microsoft\Crypto\rsa\S-1-5-21-854245398-413027322-725345543-1003\1c96f5e3071d2fe1fd8725ea7dbf2576_d94f23d0-c3c6-4280-a7c4-148368e4a6d9

<User>\Application Data\Microsoft\Protect\S-1-5-21-854245398-413027322-725345543-1003\Preferred

<User>\Application Data\Microsoft\Protect\S-1-5-21-854245398-413027322-725345543-1003\a5b65b05-0361-4def-a142-490ad6f20520

<User>\Application Data\Microsoft\Protect\credhist
<System>\ncompat.tlb

The Troj/Puper-AD is registered as a COM object and Browser Helper Object (BHO) for Microsoft Internet Explorer, creating registry entries under:

HKCR\CLSID\(E0103CD4-D1CE-411A-B75B-4FEC072867F4)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\(e0103cd4-d1ce-411a-b75b-4fec072867f4)