Troj/Dropper-TU

Category: Viruses and Spyware Protection available since:20 Feb 2008 22:31:53 (GMT)
Type: Trojan Last Updated:20 Feb 2008 22:31:53 (GMT)
Prevalence: No Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/Dropper-TU is a Trojan for the Windows platform.

When Troj/Dropper-TU is installed the following files are created:

<Temp>\_it.bat (not malicious, can be deleted)
<System>\drivers\symavc32.sys

The file symavc32.sys is detected as Troj/RKAgen-Fam.

The file symavc32.sys is registered as a new system driver service named "symavc32", with a display name of "symavc32" and a startup type of automatic, so that it is started automatically during system startup. Registry entries are created under:

HKLM\SYSTEM\CurrentControlSet\Services\symavc32

download Try Sophos products for free
Download now