FUNCS.DLL is Trojan Spy.Banker

The file FUNCS.DLL is identified as a virus dropper.
The dropper FUNCS.DLL is used for downloading and installing other malware, Trojans, viruses by the commands received from the Command Center.
The file FUNCS.DLL loads into the computer memory and tries to connect to the dangerous web site.
Usually the FUNCS.DLL dropper does not infect the files on the computer and does not replicate itself on other computers.
Kill the FUNCS.DLL process and delete the file FUNCS.DLL.

Malware Analysis of FUNCS.DLL
Full path on a computer: %Appdata%\MacromediaFlash\funcs.dll

How to quickly detect FUNCS.DLL presence?

Registry:

• HKCU\Software\Microsoft\Windows\CurrentVersion\Run\MacromediaFlashs: “%Appdata%\MacromediaFlash\MacromediaFlash.exe”

Folders:

• %Appdata%\MacromediaFlash

Files:

• %Appdata%\MacromediaFlash\funcs.dll
• %Appdata%\MacromediaFlash\MacromediaFlash.exe
• %Appdata%\MacromediaFlash\MacromediaFlash_.tmp