Sophos

Troj/Dropper-DJ

Aliases
  • Trojan-Dropper.Win32.Small.akq
Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Characteristics
  • Drops more malware
Protection available since 5 January 2006 09:25:50 (GMT)
Last updated 12 March 2007 08:34:21 (GMT)
Detected by All Sophos products
  • Endpoint Security and Control 9.0
  • Small business solutions 4.0

Action

More Information

Troj/Dropper-DJ is a dropper Trojan for the Windows platform.

When Troj/Dropper-DJ is installed it creates the file <System>\wbeconm.dll.

The file wbeconm.dll is detected as Troj/Spyaks-B.

The following registry entry is set:

HKCU\Software\Classes\CLSID\ (A2C8F6B1-7C2A-3D1C-A3C6-A1FDA113B43F)\ InProcServer32
(default)
<System>\wbeconm.dll

HKLM\SOFTWARE\Microsoft\Windows\ CurrentVersion\Explorer\SharedTaskScheduler
(A2C8F6B1-7C2A-3D1C-A3C6-A1FDA113B43F)
Security Update

Registry entries are created under:

HKCU\Software\Classes\CLSID\ (A2C8F6B1-7C2A-3D1C-A3C6-A1FDA113B43F)\ InProcServer32\

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer