Threat Database Trojans TROJ_PPOINTER.SM

TROJ_PPOINTER.SM

By GoldSparrow in Trojans

TROJ_PPOINTER.SM is a damaging Trojan infection which may be unknowingly downloaded by a computer user while visiting infected websites. TROJ_PPOINTER.SM may be distributed by other malware infections. TROJ_PPOINTER.SM enables hackers to obtain remote access and control to the affected PC system. TROJ_PPOINTER.SM adds malicious files and registers its added component as a system service so that it can start each time turn your computer on. TROJ_PPOINTER.SM modifies the registry by creating its registry keys. Remove TROJ_PPOINTER.SM as soon as possible.

File System Details

TROJ_PPOINTER.SM may create the following file(s):
# File Name Detections
1. %Windows%\ime\wmimachine2.dll

Registry Details

TROJ_PPOINTER.SM may create the following registry entry or registry entries:
Start = "2"
DisplayName = ".NET Runtime Optimization Service v2.086521.BackUp_X86"
Services\{first netsvcs}\Parameters
Services\{first netsvcs}
ErrorControl = "1"
ObjectName = "LocalSystem"
Description = "Microsoft .NET Framework NGEN"
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Type = "dword:00000020"
ImagePath = "%SystemRoot%\system32\svchost.exe -k netsvcs"
ServiceDll = "%Windows%\ime\wmimachine2.dll"

Trending

Most Viewed

Loading...