Troj/Dloader-OI is a downloader Trojan which will download, install and run new software without notification that it is doing so.
Troj/Dloader-OI includes functionality to change browser settings.
When first run Troj/Dloader-OI copies itself to <System>\popcorn64.exe and creates the following files:
<System>\msblank.html
<System>\sfdsfdsdf.exe
These files may be deleted.
The following registry entry is created to run popcorn64.exe on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
ControlPanel
<System>\popcorn64.exe rundll.dll,LoadMouseProfile
Troj/Dloader-OI changes settings for Microsoft Internet Explorer by modifying values to the following registry entry:
HKCU\Software\Microsoft\Internet Explorer\Main
Start Page
<System>\msblank.html