Infostealer.Vskim

By ZulaZuza in Stealers

Infostealer.Vskim is a Trojan that steals information from the affected computer system. Once executed, Infostealer.Vskim copies itself by dropping the malicious file on the infected computer. Infostealer.Vskim creates the registry entry so that it can run automatically every time you start Windows. Infostealer.Vskim also creates the registry entry to bypass the Windows firewall.
Infostealer.Vskim transmits the grabbed information to the remote location.

SpyHunter Detects & Remove Infostealer.Vskim

File System Details

Infostealer.Vskim may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	%UserProfile%\Application Data\svchost.exe
Name: %UserProfile%\Application Data\svchost.exe Type: Executable File Group: Malware file
2.	sopp.exe	a99d5d1652dfcda190c3d412828dcf6d	0
Name: sopp.exe MD5: a99d5d1652dfcda190c3d412828dcf6d Size: 71.16 KB (71168 bytes) Detections: 0 Type: Executable File Group: Malware file Last Updated: February 12, 2013

Registry Details

Infostealer.Vskim may create the following registry entry or registry entries:

HKEY..\..\..\..{RegistryKeys}

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\"%UserProfile%\Application Data\svchost.exe" = "%UserProfile%\Application Data\svchost.exe:*:Enabled:svchost"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\"PCI Compliant SCard" = "%UserProfile%\Application Data\svchost.exe"