high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | December 2004 (3.88) |
| Protection available since | 6 November 2004 17:42:43 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Dloader-DT is a downloader Trojan for the Windows platform.
When first run Troj/Dloader-DT copies itself into the current folder as a file named FTPGRABER.EXE. The file has the file attributes set to hidden. In order to run on system start the Trojan creates the following registry entries:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
FTPGraber
FTPGRABER.EXE
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices\
FTPGraber
FTPGRABER.EXE
The Trojan may also create or modify the following registry entry:
HKLM\Software\Microsoft\DownloadManager\
Troj/Dloader-DT runs silently and continuously downloads a file from a remote site. The downloaded file is placed in the Windows folder with the filename MTJ.EXE.
|
