- Энциклопедия угроз
- Вредоносное ПО
- ELIRKS
Windows 2000, Windows Server 2003, Windows XP (32-bit, 64-bit), Windows Vista (32-bit, 64-bit), Windows 7 (32-bit, 64-bit)
ELIRKS also as known as KLURP is a malware family of Trojans that posts messages, which contains the C&C server to PLURK, a social networking and micro-blogging service.
Autostart Technique
This Trojan modifies the following registry entries to ensure it automatic execution at every system startup:
HKEY_CURRENT_USER\Software\Microsoft\
Windows NT\CurrentVersion\Windows
load = "{malware path}\{malware name}.exe"
(Note: The default value data of the said registry entry is {blank}.)
Other Details
This Trojan connects to the following possibly malicious URL: