Downloader.GEN_442 is a Trojan. A Trojan is a program that pretends to have a valid use, but in fact modifies the user's computer in malicious way. Trojans do not replicate or spread to other computers.
Process Related Changes
It creates the following mutex(es):
- "fagzvafasfsa"
- "IESQMMUTEX_0_208"
Registry Related Changes
It makes the following registry modifications to ensure infection after system reboot: - HKLM\Software\Microsoft\Windows\CurrentVersion\Run\matchinfo = C:\ProgramFiles\matchinfo\matchinfo.exe/start
|
