Win32/Patched.HN

Win32/Patched.HN Description

Win32/Patched.HN is a malicious computer Trojan that is downloaded and installed through social networks and some system bugs in the background. Win32/Patched.HN enables remote access to your PC system without your permission. Win32/Patched.HN steals and sends out confidential data, such as credit card number/password, log in numbers, etc. Win32/Patched.HN is able to restart your computer automatically once it endeavors to access your system kernel. Win32/Patched.HN can disable your firewall and anti-spyware applications, and then take over and send all information to attackers. Win32/Patched.HN is able to change certain important system file, entries and add a start-up entry to run automatically every time Windows starts. Remove Win32/Patched.HN from your PC as soon as possible to protect your computer.

Technical Information

File System Details

Win32/Patched.HN creates the following file(s):
Expand All | Collapse All
# File Name Detection Count
1 %Temp%\.exe N/A
2 %UserProfile%\Application Data\.dll N/A

Registry Details

Win32/Patched.HN creates the following registry entry or registry entries:
Registry key
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings 'ProxyOverride' = ''
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System 'DisableTaskMgr' = '1'
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\
HKEY_CURRENT_USER\ Software\ Microsoft \Windows\ CurrentVersion\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce 'SelfdelNT'
By GoldSparrow in Trojans