| Description:
|
Details
Trojan.Win32.Coke
When run, this Trojan copies itself to the Windows SYSTEM directory with the name SHLHMP.EXE, then registers this copy in the system registry in HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun to execute it upon the next Windows start-up. The Trojan then looks for all files in the directory tree on the disk where Windows is located (excluding Windows directory), and overwrites them with the following text:
This file cracked by CoKeBoTtLe98 |
