Troj/DwnLdr-HLM

Category: Viruses and Spyware Protection available since:04 Dec 2008 03:47:04 (GMT)
Type: Trojan Last Updated:04 Dec 2008 03:47:04 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/DwnLdr-HLM is a Trojan for the Windows platform.

When run Troj/DwnLdr-HLM creates the files:
<System>\jdk-1_5_0_19-windows-i393-pp\jav.bat - can be removed
<System>\jdk-1_5_0_19-windows-i393-pp\de.class - detected as Troj/DwnLdr-HLM
<System>\jdk-1_5_0_19-windows-i393-pp\js.exe - detected as Troj/DwnLdr-HLL

Troj/DwnLdr-HLM sets the following registry entries:

HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce
Java VM v6.9.2
(blank)

HKCU\Software\Microsoft\Windows\CurrentVersion\Run
Java VM v6.9.2
<System>\jdk-1_5_0_19-windows-i393-pp\jav.bat

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
Java VM v6.9.2
(blank)

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Java VM v6.9.2
<System>\jdk-1_5_0_19-windows-i393-pp\jav.bat

download Try Sophos products for free
Download now