Troj/VB-DXM is a Trojan for the Windows platform.
Troj/VB-DXM contains functionality to connect to the internet and communicate with a remote server via HTTP.
Troj/VB-DXM is a Trojan for the Windows platform.
Troj/VB-DXM contains functionality to connect to the internet and communicate with a remote server via HTTP.
When first run Troj/VB-DXM copies itself to:
<System>\winlogonEvt.exe
and creates the file:
<Windows>\Multi-ICQ.exe - also detected as Troj/VB-DXM.
Troj/VB-DXM creates the following registry entry to start itself:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
Windows Update
<System>\winlogonEvt.exe
Troj/VB-DXM may replace the following file with a different version:
<System>\mswinsck.ocx - Legitimate Microsoft Winsock Control DLL