Threat Database Trojans Trojan.Obvod

Trojan.Obvod

By GoldSparrow in Trojans

Threat Scorecard

Threat Level: 90 % (High)
Infected Computers: 5
First Seen: July 24, 2009
Last Seen: April 15, 2019
OS(es) Affected: Windows

Trojan.Obvod is a Trojan that may drop potentially infectious files and execute malicious actions such as click-fraud on the infected computer by stealthily contacting several ad or DNS servers simulating to have been referred from legal websites. Trojan.Obvod may spread through drive-by downloads from Web exploit packs. Once executed, Trojan.Obvod copies itself to the certain location. Trojan.Obvod creates the certain .job file, which allows it to run automatically every time you start Windows. Any current scheduled tasks with the same .job file name will be overwritten. Trojan.Obvod may delete certain files. Trojan.Obvod can also download, execute and decrypt files. Trojan.Obvod reduces security settings by modifying registry entries under the following registry subkeys.

Aliases

15 security vendors flagged this file as malicious.

Anti-Virus Software Detection
Panda Trj/OCJ.B
AVG Generic30.AAJY
Fortinet W32/PornoAsset.BGFC!tr
AntiVir TR/Symmi.4572.2
DrWeb Trojan.DownLoader7.15383
F-Secure Gen:Variant.Kazy.107631
Comodo UnclassifiedMalware
Kaspersky Trojan-Ransom.Win32.PornoAsset.bgfc
ClamAV Win.Trojan.Obfuscator-1
Avast Win32:MalOb-LF [Trj]
Symantec Trojan.Gen
K7AntiVirus Riskware
McAfee PWS-Zbot.gen.anq
CAT-QuickHeal (Suspicious) - DNAScan
Panda Generic Malware

SpyHunter Detects & Remove Trojan.Obvod

File System Details

Trojan.Obvod may create the following file(s):
# File Name MD5 Detections
1. 00f95583.exe 6259a0d02d97ad11b9ec9811a9d97c44 2
2. HVW3RORc.exe d7a8d40fee309764d1da8e18ad58628d 1
3. %UserProfile%\Application Data\[RANDOM CHARACTERS].exe
4. %Windir%\Tasks\[1-48].job
5. XJnxAj4T.exe c8cc760856e9bec4e08eb194b5cec259 0
6. ni1mg2b5.exe 96031a34d945557c69788cdd6d2cd798 0
7. 31062ngw.exe 536c8e502a8d9ed0f11525a567cd5bc0 0
8. 2xkm2nx1.exe b93ad62b71dcba49292f0e5f5e958b3f 0
9. 0eexhojr.exe 79a2ec3b5806f254701910fee5ecf2d2 0

Registry Details

Trojan.Obvod may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones

Trending

Most Viewed

Loading...