Qaz.A

 Information about the Qaz.A:

Qaz.A is a 32 bit Windows based trojan spreading under Windows 95, Windows 98 and Windows NT. This trojan is presently distributed as Notepad.exe. When the infected file is executed, it renames the original Notepad.exe to note.com and copies itself as notepad.exe. It modifies the registry at the following location.

HKEY_LOCAL_ MACHINE\Software\Microsoft\Windows\CurrentVersion\Run

The trojan is executed whenever notepad is run. This trojan is also capable of spreading itself in a networked environment. No mapped drives are necessary for this trojan to execute its payload. The infection routine of this trojan is same, when it finds another machine in a network. After the completion of the infection routine on an another machine in the network the IP address of the infected machine is mailed automatically to the hacker in order to gain access..

Qaz.A first appeared in July 2000.

 Other names of Qaz.A:

This trojan is also known as Qaz.Trojan.

 Removing Qaz.A from your computer: