Threat Database Trojans Trojan.Win32.Starter.yy

Trojan.Win32.Starter.yy

By GoldSparrow in Trojans

Trojan.Win32.Starter.yy is a hazardous Trojan infection that is generated to enable hackers obtain remote access to the compromised computer system to occupy precious system resources and track your Internet habits to record/steal your sensitive details. Trojan.Win32.Starter.yy corrupts important system files and runs automatically every time you boot up your machine. Once the targeted PC is corrupted by Trojan.Win32.Starter.yy, hackers can gather and transmit your information to remote servers. You should delete Trojan.Win32.Starter.yy from the infected computer system as quickly as possible once you detect it.

File System Details

Trojan.Win32.Starter.yy may create the following file(s):
# File Name Detections
1. %UserProfile%\Local Settings\Application Data\Windows Server\[SIX RANDOM LETTERS].dll
2. %UserProfile%\Templates\memory.tmp

Registry Details

Trojan.Win32.Starter.yy may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\[TEN RANDOM LETTERS]\"[TEN RANDOM LETTERS]" = "[BINARY DATA]"
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls\"AppSecDll" = "%UserProfile%\Local Settings\Application Data\Windows Server\[SIX RANDOM LETTERS].dll"
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sr\Parameters\"FirstRun" = "1"

Trending

Most Viewed

Loading...