Home→Descriptions→Trojan-Dropper.Win32.Small.yt
| Detected | May 06 2005 08:54 GMT |
| Released | May 06 2005 08:54 GMT |
| Published | Jul 20 2005 09:51 GMT |
This malicious program is written in Windows Assembler, and is 20480 bytes in size. It is not packed in any way.
When launching, it creates a file name SVCHOST.EXE in the system director. This file is Trojan-PSW.Win32.LdPinch.ob, which will then be launched for execution.
The progam has no other malicious payload.
Trojan-Dropper programs are designed to secretly install malicious programs built into their code to victim computers.
This type of malicious program usually save a range of files to the victim’s drive (usually to the Windows directory, the Windows system directory, temporary directory etc.), and launches them without any notification (or with fake notification of an archive error, an outdated operating system version, etc.).
Such programs are used by hackers to: