Threat Database Trojans TR/Small.FI

TR/Small.FI

By Domesticus in Trojans

Threat Scorecard

Threat Level: 90 % (High)
Infected Computers: 8
First Seen: June 27, 2012
Last Seen: April 22, 2022
OS(es) Affected: Windows

TR/Small.FI is a Trojan that takes over the targeted web browser and disables protection of important system files. TR/Small.FI inserts itself into the files that are typically protected under the Windows File Protection policy. Before affecting such files, TR/Small.FI takes over the process called 'winlogon.exe' that results in the nullification of the files protected status and, basically, permits TR/Small.FI to be embedded into corrupted files. TR/Small.FI is copied from PC to PC with corrupted files and is extracted into random folders, usually within the System Files directory, at every subsequent workstation. The resulted entry created when affected files are run is a self-staring redirecting agent, which connects the corrupted machine to websites with .pl domain as specified in its latest update so that the remote hackers try to control the targeted computer via a remote server.

SpyHunter Detects & Remove TR/Small.FI

File System Details

TR/Small.FI may create the following file(s):
# File Name MD5 Detections
1. 00000001.@.vir ca2afebf1224db6f6dd903590ffd8595 3
2. file.dll 97054da52301ece758c26f5fe2682426 1
3. file.zip 237390e7c90ead88d8e68af2c65379dc 0

Trending

Most Viewed

Loading...