Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

Are there any changes to file system made by related Trojan malware?

April 26, 2017changes file malware system Trojan

0

Posted

Are there any changes to file system made by related Trojan malware?

1 Answer

0

Posted

Yes. File svc.exe is being copied to Windows System directory when the malicious file is opened. Additionally, file temp.exe was copied to system root, i.e. C:\ in most cases. 0-byte file bool.ini was copied to C:\ as well. It is worth of mentioning that .ini files are not normally visible to ordinary users without administrator rights. Reportedly bool.ini is a harmless file. This FAQ item will be updated if it comes information about new Trojan variants.