Troj/DwnLdr-FZY

Aliases	Trojan-Downloader.Win32.Delf.ayo
Category	Viruses and Spyware
Type	Trojan
What to do	If you've received an alert for a virus or spyware, then follow the instructions for removing the threat.
Prevalence	low high

Summary


Affected operating systems	Windows
Characteristics	Installs itself in the registry
Included in our products from	May 2007 (4.17)
Protection available since	26 January 2007 23:58:41 (GMT)
Last updated	8 March 2007 13:37:33 (GMT)
Detected by	All Sophos products

Troj/DwnLdr-FZY is a Trojan for the Windows platform.

Troj/DwnLdr-FZY includes functionality to download, install and run new software.

When first run Troj/DwnLdr-FZY copies itself to <Common Files>\update\update.exe.

The following registry entry is created to run update.exe on startup:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run
ScanRegistry
<Common Files>\update\update.exe

Get reports about the latest virus and spyware threats delivered to your computer