Troj/Danmec-A is a Trojan for the Windows platform.
The Trojan opens a port and offers remote attackers the ability to route HTTP traffic through the infected computer. The Trojan may also download and install additional files.
Troj/Danmec-A is a Trojan for the Windows platform.
When run, Troj/Danmec-A creates the following files:
<Windows system folder>\checkreg.exe
<Windows system folder>\iisload.dll
<Windows system folder>\s32l.txt
<Windows system folder>\ws386l.ini
<Windows system folder>\wsl22764.dll
The files checkreg.exe, iisload.dll and wsl22764.dll are also detected by Sophos's anti-virus products as Troj/Danmec-A. The files s32l.txt and ws386l.ini are harmless data files and may be deleted.
The following registry entry is created in order to run checkreg.exe each time a user logs on:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Registry Startup Check
"<Windows system folder>\checkreg.exe"
The Trojan opens a port and offers remote attackers the ability to route HTTP traffic through the infected computer. The Trojan may also download and install additional files.