English
The Internet threat alert status is currently normal. At present, no major epidemics or other serious incidents have been recorded by Kaspersky Lab’s monitoring service. Internet threat level: 1

Trojan-Dropper.Win32.Small.yt

Detected May 06 2005 08:54 GMT
Released May 06 2005 08:54 GMT
Published Jul 20 2005 09:51 GMT

Technical Details

This malicious program is written in Windows Assembler, and is 20480 bytes in size. It is not packed in any way.

When launching, it creates a file name SVCHOST.EXE in the system director. This file is Trojan-PSW.Win32.LdPinch.ob, which will then be launched for execution.

The progam has no other malicious payload.


Bookmark and Share
Share
Trojan-Dropper

Trojan-Dropper programs are designed to secretly install malicious programs built into their code to victim computers.

This type of malicious program usually save a range of files to the victim’s drive (usually to the Windows directory, the Windows system directory, temporary directory etc.), and launches them without any notification (or with fake notification of an archive error, an outdated operating system version, etc.).

Such programs are used by hackers to:

  • secretly install Trojan programs and/or viruses
  • protect known malicious programs from being detected by antivirus solutions; not all antivirus programs are capable of scanning all the components inside this type of Trojans.

Other versions