Trojan.DyCode.B

Trojan.DyCode.B is a malicious Trojan designed to offer complete access of the infected PC to its remote developers. First developed and released on 23 December 2010, Trojan.DyCode.B has gone on to infect thousands of PCs since. Trojan.DyCode.B is unable to spread by itself, and is not a self replicating threat but still dangerous just the same.

This Trojan is distributed through a variety of nefarious ways. Websites using drive-by download tactics surreptitiously deposit the Trojan.DyCode.B infection into the PC owner’s system without his knowledge. Bundled third party downloads are also responsible for Trojan.DyCode.B’s surreptitious distribution.

The user will not even be aware of Trojan.DyCode.B’s presence on the system as there are no obvious symptoms associated with this threat. The only alert the user will get as to the presence of Trojan.DyCode.B on the system will come from notifications generated by installed security software. Trojan.DyCode.B will also drop the following file on the system which is a clear indication of its presence:

Msvmiode.exe

After Trojan.DyCode.B enters the system, it will execute itself in

\msvmiode.exe

It will also modify the following registry entries to ensure that it launches each time the user logs on to Windows:

Adds value: "MSODESNV7"
With data: "c:\windows\system32\msvmiode.exe"
To subkey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

After infection Trojan.DyCode.B will contact its developers by connecting to the Internet using Port 80. It will contact its remote host to report its new infection to the author, and to receive more configurations or other data. Trojan.DyCode.B will also download and execute arbitrary files, including updates or more malware. It will also receive instructions from a remote attacker, and to upload data stolen from the user.

This data includes the user’s usernames, passwords and other sensitive financial info. Trojan.DyCode.B will also allow its developers unrestricted access to the system, and allow them to use the system for nefarious means such as mass spamming campaigns and DoS (Denial of Service) attacks, among many others.

In order to limit the damage Trojan.DyCode.B will be able to do to your PC, you need to destroy Trojan.DyCode.B with the help of a powerful security tool which will also protect your system against similar future attacks. You will only ever be able to regain complete control should you immediately destroy Trojan.DyCode.B without more delay.