Troj/Qakbot-E is a Trojan for the Windows platform.
Troj/Qakbot-E includes functionality to:
- run automatically
- copy itself to the <System> folder
- create files in the <System> folder
When Troj/Qakbot-E is installed it creates the file <System>\sdra64.exe.
The following registry entry is changed to run sdra64.exe on startup:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Userinit