Trojan . Trojan.sachost (Summary)
Software Name: Trojan.sachost
Company Name:
Product Name: Trojan.sachost
Classification: Trojan
Website:
Brief:
Silently opens and monitors certain TCP ports which may allow a remote user access to an infected computer. Logs all keystrokes, web browsing, and computer activity and sends the log to a remote location. May download other files.
IMPORTANT!
Some of the Trojan.Trojan.sachost components
are listed below. The list is compiled as a reference. The list might
not be complete and it doesn't represent instructions for manual removal.
We DO NOT recommend manual removal. Incorrect removal
of certain software might make your computer unstable or even unusable.
Removal of adware component might affect the related ad-supported software.
If you suspect that you have an unwanted instance of Trojan.sachost
installed on your computer we recommend a free
audit of your system with INAC Anti Spyware.
Trojan.sachost might create following folders (and inject its files inside
the folders):
n/a
Trojan.sachost might create following files (some of the files might be
loaded in memory while the software is running):
- %WINDOWS%\msrt32.dll
- %WINDOWS%\sachost.exe
- %WINDOWS%\sysini.ini
- %SYSTEM%\sachostc.exe
- %SYSTEM%\sachosts.exe
- %WINDOWS%\sachostx.exe
- %SYSTEM%\msvcrl.dll
- %SYSTEM%\sachostp.exe
- %SYSTEM%\sachostw.exe
- %SYSTEM%\wwwloader.exe
- %SYSTEM%\wwwloader.exe.bak
Trojan.sachost is often accompanied by the following tracking cookies:
n/a
Trojan.sachost might create following registry keys (and inject subkeys
and values):
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Mserv
Trojan.sachost might create following registry values:
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Mserv|IDwin
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|Onlune Sarvice
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|HostSrv
- HKEY_USERS\*\Software\Microsoft\Windows\CurrentVersion\Run|WinMedia
Trojan.sachost might create registry values with following data:
n/a
Trojan.sachost might insert following entries in the HOSTS file:
n/a
Click
here to scan your computer for Trojan.sachost free of charge
|