Mal/Refpron-B Description

Mal/Refpron-B is a Trojan horse that may place a compromised system, as well as its network environment, at risk. Mal/Refpron-B may infiltrate a computer and open a passage through which large amounts of adware and spyware can be piped onto a compromised system. In order to protect your PC and the sensitive information stored on it, remove Mal/Refpron-B as soon as possible.

Type: Trojans

Automatic Detection of Mal/Refpron-B

Mal/Refpron-B Technical Report

As new Mal/Refpron-B details are reported by our customers and findings from our Threat Research Center, we will update this section.

Mal/Refpron-B’s Country of Origin:

• China

Mal/Refpron-B has typically the following processes in memory:

• %System%\wmdtc.exe
• %System%\BtwSrv.dll
• %Windir%\Temp\mta13187.dll
• %System%\lsm32.sys
• %System%\FastNetSrv.exe
• %Temp%\x1c28999.dll
• %System%\opeia.exe
• %System%\FInstall.sys
• %Temp%\mta13187.dll

Mal/Refpron-B creates the following registry entries:

• [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ServiceCurrent]
• [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]

Important Article Disclaimer