Monday, March 12, 2007

Troj/DownLdr-QP

Name Troj/DownLdr-QP
Type Trojan
Affected operating systems Windows
Side effects Downloads code from the internet
Aliases Trojan-Downloader.Win32.Delf.yj

Troj/DownLdr-QP includes functionality to access the internet and communicate
with a remote server via HTTP.

When first run Troj/DownLdr-QP copies itself to:

\niw.exe
\impai.exe

and creates the following files:

\Content.IE5\89irkl2n\cd321[1].htm
\Content.IE5\od6fwfox\677977[1].htm

These files may be deleted.

Labels: ,