Threat Information for "Trojan.Peed"
| Description | Top |
-- Ease of Removal 1: Runs as a service 2: Consistently named 3: Consistent file contents 4: Creates new registry entries with consistent data -- Privacy Risks/Security Changes 1: Mimics legitimate file names -- Damage/Intrusion/Annoyance 1: Creates new files -- Propagation/Saturation 1: Uses infected computers to send mass mail 2: Infects from a link in an email 3: Infects from an email attachment 4: Installed by other infections
| Technical Details | Top |
- Added Directory/File:
FilePath: %SYSTEMDIR%\wincom32.ini - Added Directory/File:
FilePath: %ROOTDRIVE%wincom32.sys - Added Directory/File:
FilePath: %SYSTEMDIR%\peers.ini - Added Directory/File:
FilePath: %SYSTEMDIR%\wincom32.sys - Added Registry Key:
Key: HKLM\SYSTEM\CurrentControlSet\Services\wincom32 - Added Registry Key:
Key: HKLM\SYSTEM\ControlSet*\Services\wincom32

