Summary

Summary
Action
More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Protection available since | 12 May 2008 18:26:12 (GMT) |
| Detected by | All Sophos products |
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action

Summary
Action
More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Dloadr-BLP when run downloads further malware to the folder <Documents and Settings>\All Users\_qbothome.
Troj/Dloadr-BLP also creates the following registry entry so that the downloaded files autorun at startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
nwiz
"C:\documents and settings\all users\_qbothome\_qbotinj.exe" "C:\documents and settings\all users\_qbothome\_qbot.dll" /c nwiz.exe /installquiet
