Mal/Horst Description

Mal/Horst is from a family of downloading Trojans. Mal/Horst may access a user’s computer system via malicious drive-by downloads or unsolicited e-mails. Mal/Horst may give remote attackers access to a victim’s system, allowing them to steal confidential information. Remote attackers may also install additional infections onto a compromised computer. Mal/Horst is a danger to your computer system and the data stored on it.

Type: Trojans

Aliases: Win-Trojan/Cosmu.90112.H (AhnLab).

How Can You Detect Mal/Horst?

Mal/Horst has typically the following processes in memory:

• %AppData%\rsvp.exe
• %AppData%\mstinit.exe
• %System%\drivers\comrepl.exe
• %AppData%\dllhst3g.exe
• %AppData%\spoolsv.exe

Mal/Horst creates the following registry entries:

• [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run]
• [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
• [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
• [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]

Important Article Disclaimer