A forum for reverse engineering, OS internals and malware analysis 

Forum for completed malware requests.
 #19446  by tomatto007
 Tue May 28, 2013 11:19 am
Trojan.Click2:

Creates or modifies the following files:
%HOMEPATH%\Start Menu\Programs\Startup\Internet Security.vbs

Creates and executes the following:
%APPDATA%\Internet Security\insecure.exe

Creates the following files:
%APPDATA%\Internet Security\insecure.bat
%APPDATA%\Internet Security\insecure.exe

md5:
389057804e9875794cd84169f752cd18
b032fe99f8dea4eee74aeda96970d202

http://www.drwebhk.com/en/virus_techinf ... 56359.html
https://www.virustotal.com/ru/file/e98c ... /analysis/
https://www.virustotal.com/ru/file/a3d7 ... /analysis/