Troj/LowZone-I

Category: Viruses and Spyware
Type: Trojan
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/LowZone-I is a Trojan for the Windows platform.

When run, Troj/LowZone-I will reduce the security settings of Internet Explorer by modifying registry entries under the following entry:

HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3

The Trojan will then attempt to connect to a web page with Internet Explorer.

Troj/LowZone-I creates the following registry entry to run itself automatically on computer log-on:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
USBHWINFO =
<path to Trojan>

Troj/LowZone-I will attempt to create another file named "installer.exe" which is detected by Sophos Anti-virus as Troj/Agent-DN. The Trojan will also try and create the clean file named "mt-uninstaller.exe".