Troj/Small-DNT

Category	Viruses and Spyware
Type	Trojan
What to do	If you've received an alert for a virus or spyware, then follow the instructions for removing the threat.
Prevalence	low high

Summary


Affected operating systems	Windows
Characteristics	Drops more malware Installs itself in the registry
Included in our products from	February 2007 (4.14)
Protection available since	15 December 2006 20:58:55 (GMT)
Detected by	All Sophos products

Troj/Small-DNT is a Trojan for the Windows platform.

Troj/Small-DNT includes functionality to access the internet and communicate with a remote server via HTTP.

Troj/Small-DNT includes functionality to download, install and run new software. Troj/Small-DNT is a Trojan for the Windows platform.

Troj/Small-DNT includes functionality to access the internet and communicate with a remote server via HTTP.

Troj/Small-DNT includes functionality to download, install and run new software.

When first run Troj/Small-DNT copies itself to <Windows>\service32.exe and creates the file <Windows>\iexplore32.dll.

The Trojan uses stealth techniques in order to hide files and processes.

This file iexplore32.dll is detected as Troj/Small-CPW.

The following registry entry is created to run service32.exe when Windows Explorer is started:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run
1
<Windows>\service32.exe

Get reports about the latest virus and spyware threats delivered to your computer