Troj/DwnLdr-HXW is a Trojan for the Windows platform.
Troj/DwnLdr-HXW includes functionality to:
- copy iteslf to the <WINDOWS> folder
- steal confidential information
- access the internet and communicate with a remote server via HTTP
Troj/DwnLdr-HXW communicates via HTTP with the following locations:
perolasfull . com
alonsoalvesempredniments . com
untitledfiles . com
bloqueioconta . com
convitesespeciais . com
perolasorkut . com . br
profillesatuais . com . brcolor . js
When Troj/DwnLdr-HXW is installed the following files are created:
<Program Files>\Internet Explorer\acpi.vxd
<Program Files>\Internet Explorer\pdm2.dll