Sophos

Troj/Dloadr-BEV

Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Characteristics
  • Installs itself in the registry
Included in our products from December 2007 (4.24)
Protection available since 22 October 2007 19:18:48 (GMT)
Detected by All Sophos products

Action

More Information

Troj/Dloadr-BEV is a Trojan for the Windows platform.

Troj/Dloadr-BEV includes functionality to inject code into other processes, and may use this to try and bypass firewalls and download further malware.

When first run Troj/Dloadr-BEV copies itself to <System>\winocxdll.exe.

The following registry entry is created to run winocxdll.exe on startup:

HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{5640F1A1-C8EB-170B-7DE1-F55B77CA0E98}
StubPath
<System>\winocxdll.exe

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer