Sophos

Troj/DwnLdr-HEV

Category
Type
What to do
Prevalence low high

Summary

 
How it spreads
  • Web downloads
Affected operating systems Windows
Protection available since 2 July 2008 09:18:48 (GMT)
Detected by All Sophos products
  • Endpoint Security and Control 9.0
  • Small business solutions 4.0

Action

More Information

Troj/DwnLdr-HEV is a downloader Trojan on the Windows platform.

Troj/DwnLdr-HEV downloads executable code from a remote host to a temporary file with a random name and executes the code. Troj/DwnLdr-HEV deletes the downloaded file after execution.

When Troj/DwnLdr-HEV is run, Troj/DwnLdr-HEV reduces system security by terminating some of the systems anti-virus processes.

Troj/DwnLdr-HEV makes a copy of itself under C:\Documents and Settings\user\Local Settings\Temp\IEXPLORE.exe.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer