Posts Tagged ‘virus products’

Virus AlertTrojan.Win32.Jorik.Carberp.hb – Spyware is designed to steal confidential user data.

Technical details

Spyware is designed to steal confidential user data. It is a Windows (PE-EXE file). Has a size of 233,867 bytes. Packed with an unknown packer. Unpacked size – about 242 KB. Written in C + +.

Installation

After you activate the Trojan takes interceptors installed in System Service Descriptor Table (SSDT).

Further copies its body to the startup folder of the current user Windows:

% Documents and Settings% \% Current User% \ Start Menu \ Programs \ Startup \ igfxtray.exe

Thus, a copy of the Trojan is launched automatically each time the system. (more…)