Miuref.B is an Infostealer type of Trojan horse. It aims to get confidential information from a targeted computer. That information may include financial, computer or credential data. When the information is collected, it is sent to different remote locations. Also, note that Miuref.B may further download malicious browser extensions.
|Short Description||The Trojan aims to gather private information and send it to remote locations.|
|Symptoms||The Trojan duplicates itself and runs with each start of Windows. It sends sensitive information to remote locations.|
|Distribution Method||Targeted Attacks, Email Attachments, Nuclear Exploit Kit|
|Detection Tool||Download Malware Removal Tool, to See If Your System Has Been Affected by Miuref.B Trojan|
|User Experience||Join our forum to discuss the Miuref.B Trojan.|
Miuref.B Trojan – How Did I Get It?
There are a few distribution methods that the “Miuref.B” trojan uses. The most frequent one is by using exploit kits on a mass scale, specifically the Nuclear exploit kit. Other malware that uses such a method to infect computers is ransomware, exactly like Cryptowall.
Another known method of spreading the trojan is installing it manually, under the pretense of it being a useful program.
Thus, without knowing, you are getting the Trojan instead. You can also get it via browser plugins, extensions, or from visiting a site with malware on it. You might have been infected with the Miuref.B trojan from a targeted attack by downloading an attachment from an email.
Miuref.B Trojan – More About It
The Miuref.B Trojan is classified as an Infostealer type. Such types of trojans have a very specific task – to steal sensitive information. That information may be financial, about personal accounts and passwords, or about the targeted computer.
According to Symantec researchers, once the Trojan is executed it makes a duplicate version of itself in this location:
→%UserProfile%\Application Data\[Random Symbols]\[Random Name].exe
Afterwards, to make itself run with every Windows start, Miuref.B creates these registry entries:
→HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\”[RANDOM CHARACTERS]” = “%UserProfile%\Application Data\[Random Symbols]\[Random Name].exe”
→HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\”[Random CLSID]” = “%CurrentFolder%\[Random Name].exe”
Now, the Miuref.B trojan is nested deep in your PC. It changes firewall settings and connects to the following remote locations:
From them, the trojan may perform a number of actions. It may download malicious browser extensions for popular browsers like Google Chrome, Mozilla Firefox. The following system information is gathered and sent remotely:
- Processor type
- OS information
- Country/language information
- BIOS information
- Primary display monitor information
As the Miuref.B trojan works with the Nuclear exploit kit, it is possible that it gathers that information, so it can be used for Ransomware like Cryptowall to be deployed more effectively.
Remove Miuref.B Trojan Completely
This Trojan can spy on you, access various sensitive information on your computer and over time may infect you with different kinds of malware. It may track your personal information and send that data to cybercriminals, which can aid them to profit. To completely get rid of the Miuref.B Trojan horse from your computer, carefully follow the step-by-step removal instructions provided below.