Antivirus and Security Software from Sophos

Sophos blogs

Troj/DwnLdr-HXW

Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Protection available since 22 November 2009 03:58:00 (GMT)
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

Troj/DwnLdr-HXW is a Trojan for the Windows platform.

Troj/DwnLdr-HXW includes functionality to:

- copy iteslf to the <WINDOWS> folder
- steal confidential information
- access the internet and communicate with a remote server via HTTP

Troj/DwnLdr-HXW communicates via HTTP with the following locations:

perolasfull . com
alonsoalvesempredniments . com
untitledfiles . com
bloqueioconta . com
convitesespeciais . com
perolasorkut . com . br
profillesatuais . com . brcolor . js

When Troj/DwnLdr-HXW is installed the following files are created:

<Program Files>\Internet Explorer\acpi.vxd
<Program Files>\Internet Explorer\pdm2.dll

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer