Win32/BSOD [Threat Name] go to Threat
Win32/BSOD.A [Threat Variant Name]
Category | trojan |
Size | 118784 B |
Aliases | Trojan.Win32.BSOD (Kaspersky) |
Reboot-I.trojan (McAfee) | |
Trojan:Win32/BSODer (Microsoft) |
Short description
Win32/BSOD.A is a trojan that blocks access to the Windows operating system.
Installation
When executed, the trojan copies itself into the following location:
- %windir%\_system.exe
In order to be executed on every system start, the modifies the following Registry key:
- [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
- "_System" = "%windir%\_system.exe"
Other information
The trojan displays the following dialog box:
If the current system date and time matches certain conditions, the trojan terminates its execution.