Trojan.Win32.VATET.SM

It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Übertragungsdetails

It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Andere Details

Es macht Folgendes:

• It is a recompiled notepad++.exe which loads and decrypts malicious files defined by the following filenames:
  • %Windows%\debug\config.dat → Detected as Trojan.Win32.VATET.ENC
• If no config.dat was found it will execute as a normal notepad++.exe application.

(Hinweis: %Windows% ist der Windows Ordner, normalerweise C:\Windows oder C:\WINNT.)