Home Malware Programs Trojans TrojanSPM/LX

TrojanSPM/LX

Posted: October 26, 2010

TrojanSPM/LX is the Trojan which supports the rogue System Tool. TrojanSPM/LX creates a backdoor for System Tool to enter the system and may even redirect the browser to a website advertising System Tool as legitimate. Use a reliable spyware remover to make sure your PC is free of these threats.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %UserProfile%\Application Data\[random digits]
    2 %UserProfile%\Application Data\[random digits]\[random digits].bat
    3 %UserProfile%\Application Data\[random digits]\[random digits].cfg
    4 %UserProfile%\Application Data\[random digits]\[random digits].exe
    5 %UserProfile%\Desktop\System Tool.lnk
    6 %UserProfile%\Start Menu\Programs\System Tool.lnk

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce "[random digits].exe"HKEY_CURRENT_USER\Software\System Tool
Loading...