Threat Database Trojans Trojan.Mowhorc

Trojan.Mowhorc

By Sumo3000 in Trojans

Trojan.Mowhorc is a Trojan that affects .doc and .docx files on the infected computer. Once executed, Trojan.Mowhorc creates potentially malicious files. Trojan.Mowhorc creates the certain registry entries so that it can run automatically every time you start Windows. Trojan.Mowhorc may then search for .doc and .docx files, encrypt them and add a copy of itself. After this, Trojan.Mowhorc may change the filename extension from .doc or .docx to an .exe file extension.

SpyHunter Detects & Remove Trojan.Mowhorc

File System Details

Trojan.Mowhorc may create the following file(s):
# File Name MD5 Detections
1. %System%\WINWORD.exe
2. %System%\Com\ctfmoon.exe
3. %WinDir%\Temp\_$Cf\osk.exe
4. %WinDir%\Temp\_$Cf\[TROJAN].docx
5. 42b9d7e0d0b47890f879c41f8a14d0e1 42b9d7e0d0b47890f879c41f8a14d0e1 0

Registry Details

Trojan.Mowhorc may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "ctfmoon.exe" = "%System%\Com\ctfmoon.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "AUTOWORD" = "%System%\WINWORD.EXE"

Trending

Most Viewed

Loading...