Avira Virus Lab

TR/Matsnu.A.113

  • Name
    TR/Matsnu.A.113
  • Date discovered
    Jan 14, 2016
  • VDF version
    7.11.118.244 (2013-12-10 10:43)

Stay safe from all these threats with Avira Free Antivirus.

Avira Free Antivirus Download Free

The term 'TR' denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.

Operating System: Microsoft Windows.

Propagation method: The file has no spreading routine.

  • VDF
    7.11.118.244 (2013-12-10 10:43)
  • Aliases
    Avast: Win32:Dofoil-ET
    AVG: Zbot.EGM
    ClamAV: Win.Trojan.Matsnu-5
    Dr. Web: Trojan.Inject1.27909
    F-PROT: W32/Trojan2.OBMS (exact)
    McAfee: Dropper-FDH
    Trend Micro: TROJ_MATSNU.DW
    Microsoft: Trojan:Win32/Matsnu.L
    G Data: Trojan.GenericKD.1448312
    Kaspersky Lab: Trojan-Dropper.Win32.Injector.jspw
    Bitdefender: Trojan.GenericKD.1448312
    ESET: Win32/Trustezeb.E trojan
  • Files
    The following copies of itself are created:
    • %TEMPDIR%\fmsqwpwprn.pre
    • %TEMPDIR%\fmsqwpwprn.pre
    • %TEMPDIR%\Yjlclal\rynpbhcoxx.exe
    The following files are deleted:
    • %TEMPDIR%\fmsqwpwprn.pre
  • Injections
    • %SYSDIR%\svchost.exe
  • Registry
    The following registry entries are added:
    • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ("xvcxcoxx": "%TEMPDIR%\Yjlclal\rynpbhcoxx.exe")

Help make the web safer by sending us suspicious files/URLs to analyze

Submit your file/URL or Go to Avira Answers

Why submit a suspicious file?

If you encountered a suspicious file or website that’s not in our database, we’ll analyze it and determine whether it’s harmful. Our findings are then pushed out to our millions of users with their next virus database update. If you have Avira, you’ll get that update too. Don’t have Avira? Get it on our homepage.

What’s Avira Answers?

It’s our thriving community of technical professionals and part-time experts, working together to help solve tech problems. It’s the perfect place to pose your question to a community of fellow Avira users.