W32/Katusha.BN Description
W32/Katusha.BN is a hazardous Trojan, which spreads via malicious email attachments, tricky links on websites, and infected files downloaded from the web. W32/Katusha.BN uses an IRC server to download malicious files to the corrupted computer system. W32/Katusha.BN can be secretly injected to system files, and it's hard to detect and remove. W32/Katusha.BN will block other applications from running and disable system functions. Uninstall W32/Katusha.BN from the affected PC before it damages a computer system.
Technical Information
File System Details
W32/Katusha.BN creates the following file(s):
# | File Name | Detection Count |
---|---|---|
1 | %PROGRAM_FILES%\W32/Katusha.BN | N/A |
2 | c:\Documents and Settings\All Users\Start Menu\W32/Katusha.BN | N/A |
3 | c:\Documents and Settings\All Users\W32/Katusha.BN | N/A |
Registry Details
W32/Katusha.BN creates the following registry entry or registry entries:
Registry key
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\random.exe
HKEY_Current_Users\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\random.exe