TR/Dldr.Delf.anu.2 - Trojan

See also

Summary

Full description

Statistics

Virus:	TR/Dldr.Delf.anu.2
Date discovered:	14/11/2005
Type:	Trojan
Subtype:	Downloader
In the wild:	Yes
Reported Infections:	Low
Distribution Potential:	Low
Damage Potential:	Low to medium
Static file:	Yes
File size:	362.415 Bytes
MD5 checksum:	f22e8eef771a4cbbb7c4bf28ae083854
VDF version:	6.32.00.170 - Fri, 11 Nov 2005 08:07 (GMT+1)

General Method of propagation:
   • No own spreading routine

Alias:
   • TrendMicro: TROJ_DLOADER.APP

Platforms / OS:
   • Windows 95
   • Windows 98
   • Windows 98 SE
   • Windows NT
   • Windows ME
   • Windows 2000
   • Windows XP
   • Windows 2003

Side effects:
   • Drops files
   • Registry modification

Files The following files are created:

– C:\Arquivos de programas\Internet Explorer\Custom\IEXPLORE.exe Furthermore it gets executed after it was fully created. Further investigation pointed out that this file is malware, too. Detected as: TR/Dldr.Delf.WN.3

– C:\Arquivos de programas\Internet Explorer\Custom\svchost

Registry The following registry key is added:

– [HKCU\Software\WinRAR SFX]
• "C%%Arquivos de programas%Internet Explorer%Custom%"="C:\Arquivos de programas\Internet Explorer\Custom\"

See a brief description here.

Description inserted by Iulia Diaconescu on Tue, 15 Nov 2005 13:11 (GMT+1)
Description updated by Iulia Diaconescu on Mon, 12 Dec 2005 12:28 (GMT+1)

» About Malware
» About Phishing
» Viruses In the Wild

« back