Troj/Iefeat-I

Category: Viruses and Spyware
Type: Trojan
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/Iefeat-I is an downloader for adware.

Each time Troj/Iefeat-I is run it tries to download adware DLLs and executables from a remote site and install/run them.

When first run Troj/Iefeat-I adds it's pathname to a new sub-key of the following registry entry to run itself on startup:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\

The new sub-key will have the same name as the Troj/Iefeat-I executable, for example:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
f2install.exe = <path>\f2install.exe

Registry entries are also created under:

HKCR\CLSID\(24DA7F8B-73D3-2B13-CDBA-3E5AF577424E)

download Try Sophos products for free
Download now