Threat Database Trojans Trojan.Dropper.UAJ

Trojan.Dropper.UAJ

By GoldSparrow in Trojans

Trojan.Dropper.UAJ is a dangerous dropper Trojan that can avoid detection by security programs. Trojan.Dropper.UAJ hijacks a library file called comres.dll, changing it to assure that every time it's being used, Trojan.Dropper.UAJ will be launched. Comres.dll is used by many popular software programs that include web browsers, networking tools and other online communicating applications. Identified as DLL load hijacking, this technique depends on the fact that many programs aren't programmed to use a certain library file, instead they use the one that's most accessible, or set in computer system folders. To assure the success of this mechanism, Trojan.Dropper.UAJ makes a copy of the legitimate comres.dll file, changes it and then saves in the Windows directory from where the operating system usually accesses it when needed. Trojan.Dropper.UAJ then downloads and installs a backdoor Trojan known as Backdoor.Zxshell.B, which actually includes the code that compromises the PC system. Once this is executed, hackers can add and remove user files and rights, change passwords, and execute files with elevated privileges. Remove Trojan.Dropper.UAJ immediately after detection.

Trending

Most Viewed

Loading...