Sophos

Sophos blogs

Troj/Dloader-IE

Aliases
  • Trojan-Downloader.Win32.Delf.ij
Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Protection available since 24 February 2005 17:46:38 (GMT)
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

Troj/Dloader-IE is a downloader Trojan for the Windows platform.

Troj/Dloader-IE will download a file from a predefined url. The downloaded file will be in the windows folder as active_url.dll. The downloaded file is a configuration file used to tell the Trojan other files to download. The Trojan will also copy itself to the Windows system folder as msapp.exe. Troj/Dloader-IE is a downloader Trojan for the Windows platform.

Troj/Dloader-IE will download a file from a predefined url. The downloaded file will be in the windows folder as active_url.dll. The downloaded file is a configuration file used to tell the Trojan other files to download. The Trojan will also copy itself to the Windows system folder as msapp.exe.

Troj/Dloader-IE will create or modify the following registry entry:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
msnmsgs.exe
<Windows system folder>\msapp.exe

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer