Troj/Dloader-ZM is a downloader Trojan for the Windows platform.
Troj/Dloader-ZM includes functionality to download, install and run new software.
When first run Troj/Dloader-ZM copies itself to <Program Files>\Qyule\QyuleInstall.exe.
The following registry entries are created to run QyuleInstall.exe on startup:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
AutoInsQyule
<Program Files>\Qyule\QyuleInstall.exe
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
AutoInsQyule
<Program Files>\Qyule\QyuleInstall.exe
The Trojan creates files in the following folder:
<Program Files>\Qyule\