Troj/DwnLdr-BYI

Aliases	Trojan-Downloader.Win32.Harnig.bs
Category	Viruses and Spyware
Type	Trojan
What to do	If you've received an alert for a virus or spyware, then follow the instructions for removing the threat.
Prevalence	low high

Summary


Affected operating systems	Windows
Included in our products from	July 2006 (4.07)
Detected by	All Sophos products

Troj/DwnLdr-BYI is a Trojan for the Windows platform.

Troj/DwnLdr-BYI includes functionality to access the internet and communicate with a remote server via HTTP.

When Troj/DwnLdr-BYI is installed the following files are created:

<Program Files>\pgybc.exe
<Program Files>\secure32.html
\uniq
\<random filename>.exe

Troj/DwnLdr-BYI also attempts to terminate security and anti-virus related processes.

Get reports about the latest virus and spyware threats delivered to your computer