Sophos

Troj/Mdrop-BTI

Aliases
  • modified Win32/Pacex.Gen
  • PWS-Mmorpg.gen
Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Characteristics
  • Installs itself in the registry
Included in our products from August 2008 (4.32)
Protection available since 22 June 2008 19:10:50 (GMT)
Detected by All Sophos products

Action

More Information

Troj/Mdrop-BTI is a Trojan for the Windows platform.

When first run Troj/Mdrop-BTI copies itself to <System>\avpo.exe and creates the following files, all of which are also detected as Troj/Mdrop-BTI:

<Temp>\88.sys
<Temp>\jvwx2.dll
<System>\avpo0.dll

The following registry entry is created to run avpo.exe on startup:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run
avpa
<System>\avpo.exe

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer