| Description:
|
Details
Trojan.Win32.Malantern.a
This is a humerous Win32 Trojan, about 24Kb in length, and is written in Visual Basic. It was received as an IEpatch.EXE Win32 executable file.
When started, it removes the "C:WINDOWSTEMP" directory, then creates new directories:
"C:WINDOWSMagic Latern"
"C:WINDOWSFBI software"
"C:WINDOWSJohn ASScroft"
"C:WINDOWSBill Gatez"
"C:WINDOWSDesktop666"
"C:WINDOWSDesktopBin Laden"
"C:WINDOWSDesktop666 WTC"
"C:WINDOWSDesktopMagic Fuckers"
"C:WINDOWSDesktopAgentlinux"
"C:WINDOWSDesktopiFuckedYourWife"
"C:WINDOWSDesktopBiohazard Virii"
Then the Trojan deletes all *.SYS files in the "C:WINDOWSSYSTEM32DRIVERS" directory, and then displays the following message box:
Finally the Trojan displays the following screen:
When the "Who isall" button is pressed, the Trojan displays several message boxes with texts in them:
|
