Troj/Dowdec-Gen is a family of Trojan downloaders for the Windows platform.
Members of Troj/Dowdec-Gen usually consist of an executable file that drops a dll to the Windows system folder. The executable will sometimes drop a batch file to the Temp folder in order to delete itself, and may also drop a clean text or image file to the Temp folder.
The dropped dll is registered as a COM object and Browser Helper Object (BHO) for Microsoft Internet Explorer, creating registry entries under:
HKCR\CLSID\(clsid)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\
Browser Helper Objects\(clsid)
Some members of Troj/Dowdec-Gen have been seen in the form of a ZIP file attached to spam email.