Trojan.Win32.Jorik.Carberp.hb – Spyware is designed to steal confidential user data.
Technical details
Spyware is designed to steal confidential user data. It is a Windows (PE-EXE file). Has a size of 233,867 bytes. Packed with an unknown packer. Unpacked size – about 242 KB. Written in C + +.
Installation
After you activate the Trojan takes interceptors installed in System Service Descriptor Table (SSDT).
Further copies its body to the startup folder of the current user Windows:
% Documents and Settings% \% Current User% \ Start Menu \ Programs \ Startup \ igfxtray.exe
Thus, a copy of the Trojan is launched automatically each time the system. (more…)
