Mal/Emogen-P
Mal/Emogen-P is a dangerous Windows platform Trojan program. Mal/Emogen-P may register itself as a system service and steal any confidential information stored on the system. Mal/Emogen-P may also have keylogger capabilities that will give a remote attacker access to a victim's sensitive information like passwords. Mal/Emogen-P must be terminated from your PC before it causes too much damage.
File System Details
Mal/Emogen-P may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %ProgramFiles%\Baidu\AddressBar\AddressBar_Tmp\AddressBar.dll | |
| 2. | %ProgramFiles%\Baidu\AddressBar\AddressBar.dll | |
| 3. | %ProgramFiles%\��ݷ�ʽ\xiezai.exe | |
| 4. | %ProgramFiles%\��ݷ�ʽ\kkjie_skins\Default\line.png | |
| 5. | %ProgramFiles%\��ݷ�ʽ\languages\Chinese.lang | |
| 6. | %ProgramFiles%\��ݷ�ʽ\��ݷ�ʽ.url |
Registry Details
Mal/Emogen-P may create the following registry entry or registry entries:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\��ݷ�ʽ]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1DD31B76-C57E-49ba-94BC-BF53F0C82CD4}]
[HKEY_LOCAL_MACHINE\SOFTWARE\AddressBar\iexp]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00000000-0593-4356-9CF7-1D8C2B3343C0}]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{B8E20CD7-BAC2-4820-9AA6-1060B3AF25E2}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AddressBar]
