Troj/Dloadr-AOT

Aliases	Win32/TrojanDownloader.VB.AKH
Category	Viruses and Spyware
Type	Trojan
What to do	If you've received an alert for a virus or spyware, then follow the instructions for removing the threat.
Prevalence	low high

Summary


Affected operating systems	Windows
Characteristics	Installs itself in the registry
Included in our products from	November 2006 (4.11)
Protection available since	3 October 2006 21:30:36 (GMT)
Detected by	All Sophos products

Troj/Dloadr-AOT is a Trojan for the Windows platform.

Troj/Dloadr-AOT includes functionality to download, install and run new software.

When first run Troj/Dloadr-AOT copies itself to <Windows system folder>\wdfmgr32.exe.

The following registry entry is created to run wdfmgr32.exe on startup:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
wdfmgr32
<Windows system folder>\wdfmgr32.exe

Get reports about the latest virus and spyware threats delivered to your computer