Trojan.Mebratix

[Veedaz]

Warning from the Windows Advisor

Trojan.Mebratix is a Trojan infection that infects the master boot record on PCs. It creates the following files on infected systems:

C:\\​Program Files\\​MSDN\\​atixi.inf
C:\\​Program Files\\​MSDN\\​atixx.sys
C:\\​WINDOWS\\​inf\\​oem22.inf
C:\\​WINDOWS\\​inf\\​oem22.PNF

In addition to creating these files, it also creates the following registry entries:

HKEY_LOCAL_MACHINE\\​SYSTEM\\​ControlSet001\\​Control\\​Class\\​{02EB6841-28D2-44C2-8303-584F54E6D913}
HKEY_LOCAL_MACHINE\\​SYSTEM\\​ControlSet001\\​Enum\\​Root\\​ATIXI\\​0000
HKEY_LOCAL_MACHINE\\​SYSTEM\\​LastKnownGoodRecovery\\​LastGood\\​INF

 

[Nibiru2012]

Thanks for the heads up Veedaz! Good work on your part.

My ESET Smart Security is on constant vigilance though! Ready to STRIKE and DESTROY and nasty virus or trojan.

:viking::vollkommenauf::ridinghorse: