Name:

Trojan.Troxen.rts

Descr. Added:

August 6, 2012

Type:

Trojan

Risk:

Low

Payload:

N/A

At risk systems:

Windows 95/98/ME/XP/NT/2003

Malware problems?   We can help.  Free Removal Tools.

Description:

When Trojan.Troxen.rts is executed, it performs the following activities:

It drops the following files on to the system:

%Userprofile%\Desktop\DISKAPI.EXE
%Userprofile%\Desktop\SYSINT~1.EXE
%system%\SYSTIM32.EXE
%WINDOWS%SYSTIM32.EXE
%SystemRoot%\regs.sys

It creates/modifies the following registry entries:

Expl0rer = "Systim32.exe"
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

DisableTaskMgr" = dword:0x00000001
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System