Name:

Trojan.Nuqel.at

Descr. Added:

July 13, 2012

Type:

Trojan

Risk:

Low

Payload:

N/A

At risk systems:

Windows 95/98/ME/XP/NT/2003

Malware problems?   We can help.  Free Removal Tools.

Description:

When Trojan.Nuqel.at is executed, it performs the following activities:

After execution, it drops the following files:

%WinDir%\system32\autorun.ini
%WinDir%\system32\SICHOST.exe
%WinDir%\Tasks\At1.job
%WinDir%\SICHOST.exe

It modifies/creates the following registry entries:

Yahoo Messengger = "%WinDir%\SICHOST.exe"
HKU\Software\Microsoft\Windows\CurrentVersion\Run

google = "http://adxxoogle.blogspot.com/"
HKU\Software\Microsoft\Windows\CurrentVersion\Run