W32/Magania.AKCP is a Trojan that will infect Windows systems.
The Trojan arrives either as a file downloaded from remote sites by other malware or downloaded unknowingly by a user when visiting malicious web sites.
Upon execution, the Trojan drops kamsoft.exe and gasretyw1.dll in the Windows System folder. It also drops lky.exe in the root of Windows installed drive.
It modifies the registry at the following locations to load itself during each startup:
HKEY_USER\S-1-5-21-1935655697-1417001333-725345543-1003\Software\Microsoft\Windows\CurrentVersion
More information can be found at this Proland Software page.
Loading Comments...