Troj/Dloadr-CSV

Category: Viruses and SpywareProtection available since:05 Sep 2009 14:33:05 (GMT)
Type: TrojanLast Updated:05 Sep 2009 14:33:05 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/Dloadr-CSV is an adware related downloader Trojan for the Windows platform.

When first run Troj/Dloadr-CSV copies itself to:

<Windows>\msa.exe

and creates the following registry entry to run msa.exe on startup:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run
NordBull
<Windows>\msa.exe

A new scheduled task named "{7B02EF0B-A410-4938-8480-9BA26420A627}" is created to run msa.exe daily at 00.00, creating the file:

<Windows>\Tasks\{7B02EF0B-A410-4938-8480-9BA26420A627}.job

Registry entries are created under:

HKCU\Software\NordBull