Name:

Trojan.Aksula.A

Descr. Added:

June 26, 2012

Type:

Trojan

Risk:

Low

Payload:

N/A

At risk systems:

Windows 95/98/ME/XP/NT/2003

Malware problems?   We can help.  Free Removal Tools.

Description:

When Trojan.Aksula.A is executed, it performs the following activities:

It drops the following files on the system:

%WinDir%\{Random Alphanumeric}\svchost.exe [Copy of itself]
%WinDir%\system32\B91F8510.key
%WinDir%\Tasks\{random number}.job

It drops multiple jobs files for the purpose of scheduling itself for execution.

It creates/modifies the following registry entry:

{Random Alphanumeric} = "%WinDir%\{Random Alphanumeric}\svchsot.exe"
HKLM\Software\Microsoft\Windows\CurrentVersion\Run