TROJ_FRAUDLO.LO
TROJ_FRAUDLO.LO is a virus that performs distributed denial of service (DDoS) attacks. It arrives on a computer via spam email attachment, and once it has entered a computer and become active, TROJ_FRAUDLO.LO attempts to connect to specific IP addresses in order to open a backdoor for an unauthorized remote user to gain access to the system. This may lead to identity theft. TROJ_FRAUDLO.LO also downloads additional malware onto the compromised machine, while trying to replace the master boot record and searching for files with certain extensions, in order to delete the ones it cannot open or that are zero bytes in size.
File System Details
TROJ_FRAUDLO.LO may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %User Temp%\expand32xp.dll | |
| 2. | %User Temp%\wmsdk64_32.exe | |
| 3. | %User Temp%\wscsvc32.exe | |
| 4. | %User Temp%\topwesitjh | |
| 5. | %Favorites%\_favdata.dat |
Registry Details
TROJ_FRAUDLO.LO may create the following registry entry or registry entries:
wmsdk64_32.exe = "%Temp%\wmsdk64_32.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
