W32/Katusha.BN

W32/Katusha.BN Description

W32/Katusha.BN is a hazardous Trojan, which spreads via malicious email attachments, tricky links on websites, and infected files downloaded from the web. W32/Katusha.BN uses an IRC server to download malicious files to the corrupted computer system. W32/Katusha.BN can be secretly injected to system files, and it's hard to detect and remove. W32/Katusha.BN will block other applications from running and disable system functions. Uninstall W32/Katusha.BN from the affected PC before it damages a computer system.

Technical Information

File System Details

W32/Katusha.BN creates the following file(s):
# File Name Detection Count
1 %PROGRAM_FILES%\W32/Katusha.BN N/A
2 c:\Documents and Settings\All Users\Start Menu\W32/Katusha.BN N/A
3 c:\Documents and Settings\All Users\W32/Katusha.BN N/A

Registry Details

W32/Katusha.BN creates the following registry entry or registry entries:
Registry key
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\random.exe
HKEY_Current_Users\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\random.exe