Internet threat level: 1
Home→Descriptions→Trojan-Dropper.Win32.VB.iv
Trojan-Dropper.Win32.VB.iv
| Detected | Oct 06 2005 14:10 GMT |
| Released | Oct 06 2005 14:10 GMT |
| Published | Oct 10 2005 12:48 GMT |
Technical Details
This Trojan program is designed to install other malicious programs on the victim machine without the user's knowledge or consent.
The program is a Windows PE EXE file 122751 bytes in size and packed using FSG. The unpacked file is 167982 bytes in size.
Once launched, the Trojan causes the following fake error message to be displayed:
The Trojan will then extract Email-Worm.Win32.Sober.s from itself, install it on the victim machine, and launch it for execution.
The Trojan was mass mailed using spammer technologies.
Trojan-Dropper programs are designed to secretly install malicious programs built into their code to victim computers.
This type of malicious program usually save a range of files to the victim’s drive (usually to the Windows directory, the Windows system directory, temporary directory etc.), and launches them without any notification (or with fake notification of an archive error, an outdated operating system version, etc.).
Such programs are used by hackers to:
- secretly install Trojan programs and/or viruses
- protect known malicious programs from being detected by antivirus solutions; not all antivirus programs are capable of scanning all the components inside this type of Trojans.
Trojan-Dropper.
- Virus:
W32/Sober. r. dr (McAfee) - W32/Sober-P (Sophos)
- Worm.
Sober. S (ClamAV) - W32/Sober.
Y. worm!CME-151 (Panda) - W32/Sober.
R@mm (FPROT) - Worm:
Win32/Sober. S@mm. dr (MS(OneCare)) - Win32.
HLLM. Sober (DrWeb) - Win32/Sober.
R worm (Nod32) - Win32.
Sober. T@mm (BitDef7) - Win32:
Sober-R [Wrm] (AVAST) - Trojan-Dropper.
Win32. VB. I (Ikarus) - I-Worm/Sober.
T (AVG) - DR/Sober.
Q. 1 (AVIRA) - W32.
Sober. Q@mm (NAV) - Dropper.
VB. xv (Rising) - W32/Sober.
S. dr [Orion] (FSecure) - WORM_SOBER.
AC (TrendMicro)
© 1997-2013 Kaspersky Lab ZAO. All Rights Reserved.
Industry-leading Antivirus Software.
Registered trademarks and service marks are the property of their respective owners.
The authors' opinions do not necessarily reflect the official positions of Kaspersky Lab.