English
The Internet threat alert status is currently normal. At present, no major epidemics or other serious incidents have been recorded by Kaspersky Lab’s monitoring service. Internet threat level: 1

Trojan-Dropper.Win32.Small.xj

Detected Apr 16 2005 15:35 GMT
Released Apr 16 2005 15:35 GMT
Published Nov 09 2007 11:53 GMT

Technical Details
Payload
Removal instructions

Technical Details

This Trojan is designed to install and launch other programs on the victim machine without the user’s knowledge or consent. It is a Windows PE EXE file. It is 12288 bytes in size. It is written in C++.


Payload

When launching, the Trojan extracts the following file from its body:

C:\sdsw.exe

This file is 9184 bytes in size. It will be detected by Kaspersky Anti-Virus as Trojan-Downloader.Win32.Delf.ai.

This file will then be launched for execution and the Trojan will cease running.


Removal instructions

If your computer does not have an up-to-date antivirus, or does not have an antivirus solution at all, follow the instructions below to delete the malicious program:

  1. Delete the original Trojan file (the location will depend on how the program originally penetrated the victim machine).
  2. Delete the following file:
    C:\sdsw.exe
  3. Update your antivirus databases and perform a full scan of the computer (download a trial version of Kaspersky Anti-Virus).

Bookmark and Share
Share
Trojan-Dropper

Trojan-Dropper programs are designed to secretly install malicious programs built into their code to victim computers.

This type of malicious program usually save a range of files to the victim’s drive (usually to the Windows directory, the Windows system directory, temporary directory etc.), and launches them without any notification (or with fake notification of an archive error, an outdated operating system version, etc.).

Such programs are used by hackers to:

  • secretly install Trojan programs and/or viruses
  • protect known malicious programs from being detected by antivirus solutions; not all antivirus programs are capable of scanning all the components inside this type of Trojans.

Other versions