Threat Database Trojans Trojan.Bunhi

Trojan.Bunhi

By Sumo3000 in Trojans

Threat Scorecard

Threat Level: 90 % (High)
Infected Computers: 2
First Seen: July 15, 2013
Last Seen: November 14, 2019
OS(es) Affected: Windows

Trojan.Bunhi is a Trojan that enables cybercriminals to obtain remote unauthorized access and control over the victimized computer. Trojan.Bunhi steals information from the targeted PC. Once run, Trojan.Bunhi creates the infected files. Trojan.Bunhi then creates the registry entry. Trojan.Bunhi collects information about the items involving network interfaces, network usage and running processes on the corrupted PC. Trojan.Bunhi may then accomplish the damaging activities, such as take screenshots and execute network scans of public and private PCs.

File System Details

Trojan.Bunhi may create the following file(s):
# File Name Detections
1. %ProgramFiles%\netmeeting\wb64.exe
2. %System%\liveupdate.exe
3. %ProgramFiles%\HIBUN-AE\bin\sfcsrv.dat
4. %ProgramFiles%\HIBUN-AE\bin\sxdmksel[DATE].dat

Registry Details

Trojan.Bunhi may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\"MsnBeta" = "%ProgramFiles%\NetMeeting\wb64.exe"

Trending

Most Viewed

Loading...