Trojan-Dropper.Win32.Small.aal

Detected	Jun 04 2005 01:01 GMT
Released	Jun 04 2005 01:01 GMT
Published	Jan 24 2006 14:43 GMT

Technical Details

THis Trojan is programmed to install other Trojan programs on the victim machine without the user's knowledge or consent. The main file is a Windows PE EXE file 8392 bytes in size, packed using FSG. The unpacked file is approximately 41KB in size.

When launched, the Trojan drops the following file to the Windows system directory:

%System%\msole32.exe

This file will be detected by Kaspersky Anti-Virus as Trojan-Clicker.Win32.Agent.cr

This file will then be registered in the system registry and launched for execution.

The original executable file will then be deleted.

Print

Share

Malicious programs

Trojans

Trojan-Dropper

Trojan-Dropper programs are designed to secretly install malicious programs built into their code to victim computers.

This type of malicious program usually save a range of files to the victim’s drive (usually to the Windows directory, the Windows system directory, temporary directory etc.), and launches them without any notification (or with fake notification of an archive error, an outdated operating system version, etc.).

Such programs are used by hackers to:

secretly install Trojan programs and/or viruses
protect known malicious programs from being detected by antivirus solutions; not all antivirus programs are capable of scanning all the components inside this type of Trojans.

Other versions

Trojan-Dropper.Win32.Small.af

Trojan-Dropper.Win32.Small.amj

Trojan-Dropper.Win32.Small.anx

Trojan-Dropper.Win32.Small.at

Trojan-Dropper.Win32.Small.aw

Trojan-Dropper.Win32.Small.bc

Trojan-Dropper.Win32.Small.bdx

Trojan-Dropper.Win32.Small.cb

Trojan-Dropper.Win32.Small.cm

Trojan-Dropper.Win32.Small.cw

Trojan-Dropper.Win32.Small.dl