Troj/Dloader-IP

Category: Viruses and Spyware
Type: Trojan
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/Dloader-IP is a downloader Trojan.

Troj/Dloader-IP copies itself to the file WEATHER.EXE in the Daily Weather Forecast subfolder of the Windows program files folder. Troj/Dloader-IP then sets an entry in the registry at the following location so as to run the copy of itself on system startup:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
Daily Weather Forecast

Troj/Dloader-IP attempts to download and execute a file from http://auto.daily-weather.com.

download Try Sophos products for free
Download now