Follow:

 

TrojanSpy:Win32/Boonana.A


TrojanSpy:Win32/Boonana.A is a trojan that logs keystrokes. It may be downloaded into a computer by another malware, such as Trojan:Java/Boonana.


What to do now

To detect and remove this threat and other malicious software that may be installed in your computer, run a full-system scan with an up-to-date antivirus product such as the following:
 
 
For more information on antivirus software, see http://www.microsoft.com/windows/antivirus-partners/.

Threat behavior

TrojanSpy:Win32/Boonana.A is a trojan that logs keystrokes. It may be downloaded into a computer by another malware, such as Trojan:Java/Boonana.
 
It may arrive as a file named "ofex.exe". When executed, it creates a mutex named "oleacc-msaa-loaded". It then logs keystrokes from the computer, and saves these in the following file:
 
ofex.avi
 
Analysis by Jaime Wong

Symptoms

System changes
The following system changes may indicate the presence of this malware:
  • The presence of the following files:
    ofex.exe
    ofex.avi

Prevention


Alert level: Severe
First detected by definition: 1.93.789.0
Latest detected by definition: 1.93.789.0 and higher
First detected on: Oct 30, 2010
This entry was first published on: Nov 04, 2010
This entry was updated on: Apr 17, 2011

This threat is also detected as:
  • Win32/Boonana.A (ESET)