Troj/RusDrp-C

Category: Viruses and Spyware Protection available since:27 Oct 2006 00:00:00 (GMT)
Type: Trojan Last Updated:27 Oct 2006 00:00:00 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/RusDrp-C is a Trojan for the Windows platform.

When Troj/RusDrp-C is installed it first tries to create an ADS as <Windows>System32:lzx32.sys. If it fails to create it, it creates the file <System>\lzx32.sys.

The file lzx32.sys is detected as Troj/RKRustok-F.

The file lzx32.sys is registered as a new system driver service named "pe386", with a display name of "Win23 lzx files loader". Registry entries are created under:

HKLM\SYSTEM\CurrentControlSet\Services\pe386\

download Try Sophos products for free
Download now