Threat Information for "Trojan.Click.3162"

Removal Top

StopSign will automatically remove this infection with a paid membership.

Summary Top
  • Name: Trojan.Click.3162
  • Aliases:
  • Date Discovered: 2007-08-20
  • Protection Added: 2007-08-30
Description Top 
-- Ease of Removal

1: Creates new registry entries with consistent data
2: Consistent file contents
3: Consistently named
4: Uses running processes

-- Privacy Risks/Security Changes

1: Mimics legitimate file names

-- Damage/Intrusion/Annoyance

1: Displays targeted popup advertisements
2: Creates new files

-- Propagation/Saturation

1: Installed by other infections
Technical Details Top
  • Added Directory/File:
    FilePath: %SYSTEMDIR%\sb??????????.web
  • Added Directory/File:
    FilePath: %TEMPDIR%\svcosvt.exe
  • Added Directory/File:
    FilePath: %SYSTEMDIR%\delme.bat
  • Added Directory/File:
    FilePath: %SYSTEMDIR%\*.web MD5: a7dab799dc72c6ec297e4849714965ad
  • Added Directory/File:
    FilePath: %TEMPDIR%\svcosvt.exe.url
  • Added Directory/File:
    FilePath: %ROOTDRIVE%svcosvt.exe FileSize: 15942 MD5: 26dfc5ee96416f036132571548658dbd