Troj/Dloader-QZ

Aliases	Trojan-Downloader.Win32.Delf.gd
Category	Viruses and Spyware
Type	Trojan
What to do	If you've received an alert for a virus or spyware, then follow the instructions for removing the threat.
Prevalence	low high

Summary


Affected operating systems	Windows
Characteristics	Installs itself in the registry
Included in our products from	November 2005 (3.99)
Protection available since	25 July 2005 13:03:13 (GMT)
Last updated	11 October 2005 20:20:18 (GMT)
Detected by	All Sophos products

Troj/Dloader-QZ is a downloader Trojan for the Windows platform.

Troj/Dloader-QZ attempts to downloads files from predefined URLs as active_url.dll. At the time of writing, these files were not available.

The Trojan copies itself to the Windows system folder as taskimg.exe.

In order to run on system startup Troj/Dloader-QZ will create or modify the following registry entry:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
taskmrg.exe
<Windows system>\taskimg.exe

Get reports about the latest virus and spyware threats delivered to your computer