Scar.gen.j

Scar.gen.j is a general detection for a Trojan that replaces executable files on a compromised PC with its own malicious version. On penetrating a system, Scar.gen.j will drop an Autorun.Inf file on shared drives and removable USB drives. Scar.gen.j will drop the same file into the root of all local drives and system folders. Scar.gen.j is a security threat that should be removed upon detection.

File System Details

Scar.gen.j may create the following file(s):
# File Name Detections
1. C:\WinNT.exe
2. %System%\ntldr.exe

Registry Details

Scar.gen.j may create the following registry entry or registry entries:
Data: NoDriveAutoRun = 0*00000000
Data: NoDriveTypeAutoRun = 0*00000000
Data: NT4 hosting service = "%System%\ntldr.exe"
Hkey_Local_Machine\Software\Microsoft\Windows\CurrentVersion\policies\Explorer
Hkey_Local_Machine\Software\Microsoft\Windows\CurrentVersion\Run]

Trending

Most Viewed

Loading...