What is the Win32.Troj.Small.ab virus?

Win32.Troj.Small.ab This is a trojan download, used to download and execute Trojans. Influence system has win9x/winnt.

Virus alias: TROJAN-DOWNLOADER.WIN32.SMALL.ABT[AVP]

Processing time:

Threat Level: ★

Chinese name:

Virus type: Trojan Horse

Impact System: WIN9X/WINNT

Virus behavior:

1. Create a file under the system directory%system%:

Cmd64.exe (itself)

Systems32.exe

Driver64.exe (TROJAN.WIN32.DIALER.GD)

Mutlo.exe (TROJAN.SERPO.A)

Commandos.exe (Trojan-dropper.win32.small.ol)

Popup_bl.dll (Trojan-dropper.win32.small)

Systr.dll

To create a file in the current directory of the virus:

1.dat (Systems32.exe)

2.dat (TROJAN.WIN32.DIALER.GD)

3.dat (TROJAN.SERPO.A)

4.dat (Trojan-dropper.win32.small.ol)

Gigasoft.dll

2. Modify the Registration form:

To add a registry key:

Hkey_local_machinesoftwaremicrosoftwindowscurrentversionrun

"ControlPanel" = "C:winntsystem32cmd64.exe internat.dll,loadkeyboardprofile"

Hkey_local_machinesoftwaremicrosoftwindowscurrentversionexplorersharedtaskscheduler

"Sysctl Desktop Handler" = ""

Hkey_classes_rootclsidinprocserver32

"Default" = "C:winntsystem32systr.dll"

"ThreadingModel" = "Apartment"

3. Visit some of the scheduled URLs, download the Trojan horse program and run.

4. Modify the homepage and add some URLs to the Favorites folder:

%favorites%computers and privacy

Adware Removal.url

Broadband.url

Cable.url

Domain Hosting.url

Domain Names.url

Dsl.url

E Commerce.url

Internet Access.url

Popup Blocker.url

Spyware Removal.url

Web Design.url

%favorites%finance

Bad Credit.url

Credit Cards.url

Debt Consolidation.url

Fast Cash.url

Home Business.url

Home Mortgage.url

Home Refinance.url

Investerment.url

Payday Loan.url

Student Loan.url

%favorites%real Estate

Commercial Mortgage.url

Condominiums.url

Home Business.url

Home Equity Loan.url

Home Improvement.url

Home Insurance.url

Home Mortgage.url

Interior Design.url

Mortgage Quote.url

Mortgage Refinancing.url

%favorites%sport

Baseball Betting.url

Basketball Betting.url

Fishing.url

Fitness.url

Football Betting.url

Golf.url

Horse Racing.url

Personal Trainers.url

Sport Cars.url

Sportsbook.url

%favorites%dating

Adult Dating.url

Chat Dating.url

Chat Flirt.url

Dating.url

Marriage.url

Matchmaking.url

Personals.url

Romance.url

Singles.url

Wedding.url

%favorites%gambling

Baccarat.url

Betting.url

Bingo.url

Blackjack.url

Horse Racing.url

Online Casinos.url

Online Roulette.url

Poker.url

Slot Machines.url

Sportsbook.url

%favorites%pharmacy

Acne control.url

Breast Enhancement.url

Diet Patch.url

Human Growth Hormone.url

Penis Enlargement.url

Tramadol.url

Valium.url

Viagra.url

Vicodin.url

Weight.url

%favorites%shopping

Auto.url

Books.url

Clothing.url

Computers Subaff.url

Cosmetics.url

Electronics.url

Gifts.url

Laptops.url

Printers.url

Skin Care.url

Trade Shows.url

Wedding Gift.url

%favorites%travel

Air Flight.url

Caribbean Cruises.url

Cruise Travel.url

Discount Travel.url

Hawaii Vacation.url

Hotels.url

Rental Cars.url

Carnival Cruises.url

Travel Insurance.url

Vacation Packages.url

5. Add links to the desktop adware Remover,home mortgages,online dating,online pharmacy,poker.