Class | Trojan |
Platform | Win32 |
Description |
Technical DetailsThis Trojan is designed to steal user passwords. It is a Windows PE EXE file. It is 57,821 bytes in size. It is packed using UPX. The unpacked file is approximately 73KB in size. InstallationWhen launching, the Trojan extracts the following files from its body:
Once the Trojan has extracted %System%Bk_client.htm from its body, the Trojan itself will be launched. The Trojan also adds the following parameter to the system registry: [HKLMSOFTWAREMicrosoftWindowsCurrentVersionRun]
“Bk_client.htm” = “%System%Bk_client.htm” This ensures that each time the operating system is loaded, Internet Explorer will be launched, opening %System%Bk_client.htm. PayloadThis program is designed to hack a Russian game called ‘Boitsovskii klub’ (Fight Club). However, this is a fake program, and the Trojan will actually conduct the following actions:
Removal instructionsIf your computer does not have an up-to-date antivirus, or does not have an antivirus solution at all, follow the instructions below to delete the malicious program:
|
Find out the statistics of the threats spreading in your region |