Threat Database Trojans Troj/Spy-HN

Troj/Spy-HN

By Domesticus in Trojans

Troj/Spy-HN is a malicious keylogger program that can occupy all user keystrokes that involve personal details such username, password, credit proliferate via network if the malicious drive is shared at the network. Troj/Spy-HN will download files to the computer without user's authorization at the background which will result in security danger. Troj/Spy-HN can even enable cyber-criminals obtain remote access to the corrupted computer system. Troj/Spy-HN removal should be performed at the time it is detected on a PC system.

File System Details

Troj/Spy-HN may create the following file(s):
# File Name Detections
1. %System%\mspk.sys
2. %System%\tabcteng.dll
3. %PROGRAM_FILES%\Troj/Spy-HN
4. C:\Documents and Settings\\Start Menu\Troj/Spy-HN\
5. %Temp%\mst2.tmp
6. C:\Documents and Settings\\Troj/Spy-HN\
7. %Temp%\tmp1.tmp

Registry Details

Troj/Spy-HN may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MSPK\0000\Control
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MSPK
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mspk\Enum
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mspk
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\mspk
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\mspk\Security
HKEY_LOCAL_MACHINE\Software\Troj/Spy-HN
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\mspk\Enum
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MSPK\0000
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mspk\Security

Trending

Most Viewed

Loading...