[Fedor22]

Fake Chrome (Trojan:Win32/Skeeyah.A!rfn)
Dropped in:

Code: Select all

C:\Users\*username*\AppData\Roaming\WebBrowser.exe

Changes the autorun value in:

Code: Select all

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

URL:

Code: Select all

xxxx://campinglesamis.com/wpscripts/Chrome%20Hijacker.exe

VT (55/67): https://www.virustotal.com/en/file/d569 ... /analysis/