Troj/Dloadr-AXV

Category: Viruses and Spyware Protection available since:02 May 2007 00:00:00 (GMT)
Type: Trojan Last Updated:02 May 2007 00:00:00 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/Dloadr-AXV is a Trojan for the Windows platform.

Troj/Dloadr-AXV includes functionality to access the internet and communicate with a remote server via HTTP.

When first run Troj/Dloadr-AXV copies itself to <System>\drivers\uzcx.exe.

The following registry entry is created to run uzcx.exe on startup:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
iut75
<System>\drivers\uzcx.exe

Registry entries are created under:

HKCU\Software\ewrew\u\main
HKCU\Software\ewrew\uzcx\main

Troj/Dloadr-AXV includes functionality to terminate the processes OUTPOST.EXE, LSPFIX.EXE, KAVPF.EXE, ZLCLIENT.EXE and KPF4SS.EXE.

download Try Sophos products for free
Download now