Troj/DwnLdr-HLL

Category: Viruses and Spyware Protection available since:04 Dec 2008 03:25:19 (GMT)
Type: Trojan Last Updated:04 Dec 2008 03:25:19 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/DwnLdr-HLL is a Trojan for the Windows platform.

When run Troj/DwnLdr-HLL creates the files:
<System>\jdk-1_5_0_19-windows-i391-pp\jav.bat - can be safely deleted
<System>\jdk-1_5_0_19-windows-i391-pp\dc.class - detected as Troj/DwnLdr-HLL
<System>\jdk-1_5_0_19-windows-i391-pp\js.exe - detected as Troj/DwnLdr-HLL

Troj/DwnLdr-HLL sets the following registry entries:

HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce
Java VM v6.91
(blank)

HKCU\Software\Microsoft\Windows\CurrentVersion\Run
Java VM v6.91
<System>\jdk-1_5_0_19-windows-i391-pp\\jav.bat

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
Java VM v6.91
(blank)

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Java VM v6.91
<System>\jdk-1_5_0_19-windows-i391-pp\\jav.bat

download Try Sophos products for free
Download now