Internet threat level: 1
Home→Descriptions→Trojan.Win32.Small.eu
Trojan.Win32.Small.eu
| Detected | Jul 12 2005 09:41 GMT |
| Released | Jul 12 2005 09:41 GMT |
| Published | Oct 28 2005 08:27 GMT |
Technical Details
This Trojan is a Windows PE EXe file 3584 bytes in size.
Once launched, the Trojan registers this file in the system registry, ensuring that it will be launched each time Windows is rebooted on the victim machine:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Runonce] "MSSetup"="<path to Trojan file>"
The Trojan downloads a file named req.exe from http://us****tov.net/mysql/ and launches it for execution on the victim machine.
This type of behaviour covers malicious programs that delete, block, modify, or copy data, disrupt computer or network performance, but which cannot be classified under any of the behaviours identified above.
This classification also covers “multipurpose” Trojan programs, i.e. those that are capable of conducting several actions at once and which demonstrate several Trojan behaviours in a single program. This means they cannot be indisputably classified as having any single behaviour.
Trojan.
- Mal/HckPk-D (Sophos)
- Adware/PsGuard (Panda)
- W32/FakeAlert.
AF (FPROT) - Trojan:
Win32/intell32 (MS(OneCare)) - Trojan.
Fakealert (DrWeb) - Win32/Oleloa.
E (Nod32) - Trojan.
Intel32. A (BitDef7) - Trojan.
Small. XZ (VirusBuster) - Win32:
Trojano-1744 (AVAST) - Trojan.
Win32. Small. EU (Ikarus) - Generic.
FU (AVG) - TR/Crypt.
ULPM. Gen (AVIRA) - Trojan.
Desktophijack (NAV) - DesktopHijack (NAI)
- TROJ_SMALL.
AMG (PCCIL)
© 1997-2012 Kaspersky Lab ZAO. All Rights Reserved.
Industry-leading Antivirus Software.
Registered trademarks and service marks are the property of their respective owners.