Troj/LowZone-CX is a Trojan for the Windows platform.
Troj/LowZone-CX includes functionality to access the internet and communicate with a remote server via HTTP.
Troj/LowZone-CX is a Trojan for the Windows platform.
Troj/LowZone-CX includes functionality to access the internet and communicate with a remote server via HTTP.
When first run Troj/LowZone-CX copies itself to <Windows system folder>\bikini.exe.
The following registry entry is created to run bikini.exe on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
bikini
bikini.exe
The following registry entry is set, affecting internet security:
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3
CurrentLevel
11