Sophos

Troj/Delf-ACL

Aliases
  • Trojan-Downloader.Win32.Delf.ac
Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Characteristics
  • Installs itself in the registry
Included in our products from February 2006 (4.02)
Protection available since 8 December 2005 09:18:04 (GMT)
Detected by All Sophos products

Action

More Information

Troj/Delf-ACL is a Trojan for the Windows platform.

When first run Troj/Delf-ACL copies itself to <Program Files>\explorer.exe and creates the file <System>\systemlr.dll. The file systemlr.dll is detected by Sophos as Troj/Delf-ACL.

The following registry entry is created to run Troj/Delf-ACL on startup:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
explorer.exe
<Program Files>\explorer.exe

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer