Sophos

Troj/Dloadr-BLA

Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Characteristics
  • Installs itself in the registry
Included in our products from June 2008 (4.30)
Protection available since 24 April 2008 22:43:57 (GMT)
Detected by All Sophos products

Action

More Information

Troj/Dloadr-BLA copies itself to <System>\wind32.exe

Troj/Dloadr-BLA creates the following registry entry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
System
<System>\wind32.exe

Troj/Dloadr-BLA disables the Windows task manager by using following registry entry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System
DisableTaskMgr

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer