Threat Database Trojans Trojan-Clicker.AA

Trojan-Clicker.AA

By Domesticus in Trojans

Trojan-Clicker.AA is a destructive Trojan infection that usually spreads via spam email messages. Once Trojan-Clicker.AA infiltrates into your computer system, it will change your desktop background and display various fake warning messages. Trojan-Clicker.AA is able to redirect the targeted users to malicious websites. Trojan-Clicker.AA is a serious risk to both the compromised PC and the Internet environment. Uninstall Trojan-Clicker.AA from your machine as soon as possible upon detection.

File System Details

Trojan-Clicker.AA may create the following file(s):
# File Name Detections
1. %Windir%\11market.ico
2. %Windir%\gmarket.ico
3. [file and pathname of the sample #1]
4. %Windir%\auction.ico
5. %AppData%\domain.txt

Registry Details

Trojan-Clicker.AA may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B6CD05C0-7E18-4c8d-BEC5-1DBCA0B259C5}\DefaultIcon
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2C6CA493-9BEB-483a-B8DF-527C8AD37CE4}\DefaultIcon
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2C6CA493-9BEB-483a-B8DF-527C8AD37CE4}\shell\GmarketIcon\Command
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B6CD05C0-7E18-4c8d-BEC5-1DBCA0B259C5}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2C6CA493-9BEB-483a-B8DF-527C8AD37CE4}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2C6CA493-9BEB-483a-B8DF-527C8AD37CE4}\shell\GmarketIcon
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2C6CA493-9BEB-483a-B8DF-527C8AD37CE4}\ShellFolder
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B6CD05C0-7E18-4c8d-BEC5-1DBCA0B259C5}\shell
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2C6CA493-9BEB-483a-B8DF-527C8AD37CE4}\shell

Trending

Most Viewed

Loading...