Registrycleanerz

Whenever you switch on your PC your antivirus shows you a warning indicating the presence of a Trojan. Due to this infection, every time you use your search engine you are redirected to casino and porn sites or in some cases the search pages are not displayed at all. Does it really irritate you? Bad news, looking at the above symptoms you could very well be infected with Trojan.Metajuan.

Table 1.Threat Alias

The fact is that you may catch Trojan.Metajuan in the following ways; the trojan can be dropped by other malware or downloaded from malicious Web sites while using Internet Explorer exploits.

Once the Trojan is executed, it will create the following registry entry:

HKEY_CLASSES_ROOT\CLSID\68D5CF1D-EC5C-4bdd-A9EF-F0E517565D50}\InprocServer32\”Default” = “%Temp%\[NAME OF TROJAN EXECUTABLE].dll”

After that, the Trojan creates the following registry subkey to register itself as a Browser Helper Object:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{68D5CF1D-EC5C-4bdd-A9EF-F0E517565D50}

Finally, Trojan.Metajuan contacts the following site:

[http://]65.243.103.58/trafc-2/rfe[REMOVED]

In addition, the Trojan is able to download potentially malicious files on to the compromised computer.

To avoid computer problems and not cause serious harm to your system, be wary of computer infections such as Trojan.Metajuan.

Resources:
Alias names of the Trojan
Details of the Trojan.Metajuan
Additional information on Trojan. Metajuan