PWS:Win32/Fotip.A

By Domesticus in Trojans

PWS:Win32/Fotip.A is a password-stealing Trojan that grabs an attcekd computer user's passwords for email and IM applications and passwords stored in web browsers. PWS:Win32/Fotip.A then transfers these passwords to a remote cybercriminal. PWS:Win32/Fotip.A aims to steal the target PC user's passwords. After PWS:Win32/Fotip.A has been uninstalled, affected PC users should change their passwords. While being installed on the victimized computer, PWS:Win32/Fotip.A makes system changes by dropping harmful files and modifying the Windows Registry. PWS:Win32/Fotip.A disables the Windows Firewall, and transfers the passwords stolen by a variety of programs to a remote FTP website.

File System Details

PWS:Win32/Fotip.A may create the following file(s):

Expand All | Collapse All

#	File Name	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	ictd.bat
Name: ictd.bat Type: Batch file Group: Malware file
2.	image.exe
Name: image.exe Type: Executable File Group: Malware file
3.	icd.bat
Name: icd.bat Type: Batch file Group: Malware file
4.	iewed.bat
Name: iewed.bat Type: Batch file Group: Malware file
5.	picture viewer.exe
Name: picture viewer.exe Type: Executable File Group: Malware file
6.	aatd.bat
Name: aatd.bat Type: Batch file Group: Malware file
7.	ied.bat
Name: ied.bat Type: Batch file Group: Malware file
8.	msnd.exe
Name: msnd.exe Type: Executable File Group: Malware file
9.	cond.reg
Name: cond.reg Group: Malware file
10.	keeprun.ini
Name: keeprun.ini Group: Malware file
11.	bms.klm
Name: bms.klm Group: Malware file
12.	sad.vbs
Name: sad.vbs Group: Malware file
13.	dd.vbs
Name: dd.vbs Group: Malware file
14.	pid.pdf
Name: pid.pdf Group: Malware file

Registry Details

PWS:Win32/Fotip.A may create the following registry entry or registry entries:

HKEY..\..\..\..{RegistryKeys}

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run stat2 = "aatd.bat"

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

PWS:Win32/Fotip.A

File System Details

Registry Details

Submit Comment

Trending

Rzfu Ransomware

'YouPorn' Email Scam

Rzkd Ransomware

Most Viewed

Is Lookmovie.io Safe?

How To Fix 'Printer Driver is Unavailable' Error

Discord Shows Black Screen when Sharing Screen