Troj/TCXMedi-D

Category: Viruses and Spyware
Type: Trojan
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/TCXMedi-D is a Trojan related to pornographic material.

Troj/TCXMedi-D downloads an image from an adult website, storing it as SETUPZMP.DLL in the Windows folder.

Troj/TCXMedi-D sets the following registry entry in order to run itself on system startup:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run
cmsound
<Trojan filename including path>

The Trojan may also create registry entries under HKCU\Software\Microsoft\MSDN\DevCTR.

download Try Sophos products for free
Download now