• Home
• >Threat Encyclopaedia
• >Descriptions
• > Win32/TrojanDownloader.Tracur.D

Short description

Win32/TrojanDownloader.Tracur.D is a trojan that changes results of online search engines.

Installation

When executed, the trojan copies itself into the following location:

The trojan creates the following files:

The trojan may create copies of itself using the following filenames:

The trojan registers itself as a system service using a random filename.

The trojan executes the following commands:

The performed command creates an exception in the Windows Firewall.

The following Registry entries are created:

The trojan may create the following files:

A string with variable content is used instead of %variable1-10% .

The trojan registers the file %system%\%variable2%32.dll as a Browser Helper Object module in Internet Explorer .

The trojan registers the file %profilefolder%\Application Data\Mozilla\Firefox\Profiles\%variable8%.default\extensions\{%variable4%}\chrome\xulcache.jar as a Firefox Add-On module in Mozilla Firefox .

The trojan registers the file %profilefolder%\Local Settings\Application Data\Google\Chrome\User Data\Default\Default\%variable10%\contentscript.js as a Chrome Extension module in Google Chrome .

Other information

Win32/TrojanDownloader.Tracur.D is a trojan that changes results of online search engines.

The trojan interferes with communication when any of the following sites is accessed:

The trojan can redirect results of online search engines to web sites that contain adware.

The trojan contains a list of (6) URLs.

It tries to download a file from the addresses. The HTTP protocol is used.

The file is stored in the following location:

The file is then executed.

• Contact |
• Privacy |
• Legal Information |
• Sitemap