English
The Internet threat alert status is currently normal. At present, no major epidemics or other serious incidents have been recorded by Kaspersky Lab’s monitoring service. Internet threat level: 1

Trojan-Dropper.Win32.Small.bdx

Detected Jan 23 2008 18:37 GMT
Released Jan 23 2008 22:22 GMT
Published Feb 08 2008 15:56 GMT

Technical Details
Payload
Removal instructions

Technical Details

This Trojan component will install other programs to the victim machine without the knowledge or consent of the user. It is a Windows PE EXE file. It is 58880 bytes in size. It is packed using UPX. The unpacked file is approximately 76KB in size.


Payload

This program is an AD/LDAP Provider which is required for access to directory services. It is used to authenticate users in the system.


Removal instructions

If your computer does not have an up-to-date antivirus, or does not have an antivirus solution at all, follow the instructions below to delete the malicious program:

  1. Use Task Manager to terminate the Trojan process.
  2. Delete the original Trojan file (the location will depend on how the program originally penetrated the victim machine).
  3. Update your antivirus databases and perform a full scan of the computer (download a trial version of Kaspersky Anti-Virus).

Bookmark and Share
Share
Trojan-Dropper

Trojan-Dropper programs are designed to secretly install malicious programs built into their code to victim computers.

This type of malicious program usually save a range of files to the victim’s drive (usually to the Windows directory, the Windows system directory, temporary directory etc.), and launches them without any notification (or with fake notification of an archive error, an outdated operating system version, etc.).

Such programs are used by hackers to:

  • secretly install Trojan programs and/or viruses
  • protect known malicious programs from being detected by antivirus solutions; not all antivirus programs are capable of scanning all the components inside this type of Trojans.

Other versions

Aliases

Trojan-Dropper.Win32.Small.bdx (Kaspersky Lab) is also known as:

  • Mal/Generic-A (Sophos)
  • Trojan.Dropper-6729 (ClamAV)
  • Trojan.MulDrop.12882 (DrWeb)
  • Trojan-Dropper.Win32.Small.bdx (Ikarus)
  • BackDoor.Generic9.NBK (AVG)
  • HEUR/Malware (AVIRA)
  • BackDoor-CEP.svr (NAI)