Trojan-Dropper.Win32.Small.amj

Technical Details

This Trojan is designed to install and launch other malicious programs on the victim machine without the knowledge or consent of the user. It is a Windows PE EXE file. It is 86016 bytes in size. It is written in C++.

Payload

When launching, the Trojan extracts two files from its body and saves them as follows:

This file is 3072 bytes in size. It will be detected by Kaspersky Anti-Virus as Trojan-Downloader.Win32.Tiny.ba.

This file is 47104 bytes in size. It will be detected by Kaspersky Anti-Virus as Backdoor.Win32.IRCBot.nw.

These files will then be launched for execution.

The Trojan then creates a command interpreter packet file in the current user's temporary directory and launches it. This file will delete the original Trojan file and its body.

Removal instructions

If your computer does not have an up-to-date antivirus, or does not have an antivirus solution at all, follow the instructions below to delete the malicious program:

1. Delete all files created by the Trojan.
   %System%\sysdb32.exe
   %System%\tcpb32.exe
2. Update your antivirus databases and perform a full scan of the computer (download a trial version of Kaspersky Anti-Virus).