3/9: Wincod Trojan Drops Files, Modifies Settings
W32/Wincod is a Trojan that will infect Windows systems.
Upon execution, W32/Wincod drops the following files in Program Files\MediaSystem folder:
The Trojan modifies registry at the following locations:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Threat Alerts
Digg
del.icio.us
Newsvine
Facebook
Google
LinkedIn
MySpace
Reddit
Slashdot
StumbleUpon
Technorati
Twitter
Windows Live
YahooBuzz
FriendFeedMore information can be found at this Proland Software page.
According to Symantec, which also issued an alert, Trojan.Wincod is a Trojan horse that displays message boxes and modifies settings on the compromised computer.
Technical details can be found at this Symantec page.
