|Detected||Jul 29 2010 10:50 GMT|
|Released||Jul 29 2010 17:06 GMT|
|Published||Mar 22 2011 14:15 GMT|
This Trojan downloads files from the Internet and launches them without the user's knowledge. It is a Windows dynamic library (PE DLL file). It is 4608 bytes in size. It is written in C++.
The Trojan library performs the functionality of a downloader. The library exports the function "Launch", and when it calls this function, it establishes a connection with the following server:
m***lo.inThen, a file named "s.txt" is requested from the server; this file contains links for downloading files. After this, files are downloaded from the links obtained and launched for execution. The downloaded files are saved in the directory
%Temporary Internet Files%At the time of writing, these files could not be downloaded.
If your computer does not have an antivirus, and is infected by this malicious program, follow the instructions below to delete it:
Programs classified as Trojan-Downloader download and install new versions of malicious programs, including Trojans and AdWare, on victim computers. Once downloaded from the Internet, the programs are launched or included on a list of programs which will run automatically when the operating system boots up.
Information about the names and locations of the programs which are downloaded are in the Trojan code, or are downloaded by the Trojan from an Internet resource (usually a web page).
This type of malicious program is frequently used in the initial infection of visitors to websites which contain exploits.