Summary

Summary
Action
More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | December 2007 (4.24) |
| Protection available since | 22 October 2007 19:18:48 (GMT) |
| Detected by | All Sophos products |
Action

Summary
Action
More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Dloadr-BEV is a Trojan for the Windows platform.
Troj/Dloadr-BEV includes functionality to inject code into other processes, and may use this to try and bypass firewalls and download further malware.
When first run Troj/Dloadr-BEV copies itself to <System>\winocxdll.exe.
The following registry entry is created to run winocxdll.exe on startup:
HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{5640F1A1-C8EB-170B-7DE1-F55B77CA0E98}
StubPath
<System>\winocxdll.exe
