English
The Internet threat alert status is currently normal. At present, no major epidemics or other serious incidents have been recorded by Kaspersky Lab’s monitoring service. Internet threat level: 1

Trojan-Dropper.Win32.Small.k

Detected Nov 13 2001 20:00 GMT
Released Nov 13 2001 20:00 GMT
Published Mar 05 2007 09:20 GMT

Technical Details
Payload
Removal instructions

Technical Details

This Trojan is designed to install other malicious progrms to the victim machine. It is a Windows PE EXE file. The file is approximately 615KB in size.

Payload

Once launched, the Trojan extracts two files to the Windows temporary directory. The files names are randomly generated from lower case Latin letters.

These files will be detected by Kaspersky Anti-Virus as:

HackTool.Win32.Haktek.11
Backdoor.Win32.Oblivion.011

Both files are then launched for execution.


Removal instructions

If your computer does not have an up-to-date antivirus, or does not have an antivirus solution at all, follow the instructions below to delete the malicious program:

  1. Use Task Manager to terminate the Trojan process.
  2. Delete the original Trojan file (the location will depend on how the program originally penetrated the victim machine).
  3. Delete the contents of %Temp%.
  4. Update your antivirus databases and perform a full scan of the computer (download a trial version of Kaspersky Anti-Virus).

Bookmark and Share
Share
Trojan-Dropper

Trojan-Dropper programs are designed to secretly install malicious programs built into their code to victim computers.

This type of malicious program usually save a range of files to the victim’s drive (usually to the Windows directory, the Windows system directory, temporary directory etc.), and launches them without any notification (or with fake notification of an archive error, an outdated operating system version, etc.).

Such programs are used by hackers to:

  • secretly install Trojan programs and/or viruses
  • protect known malicious programs from being detected by antivirus solutions; not all antivirus programs are capable of scanning all the components inside this type of Trojans.

Other versions

Aliases

Trojan-Dropper.Win32.Small.k (Kaspersky Lab) is also known as:

  • TrojanDropper.Win32.Small.k (Kaspersky Lab)
  • Trojan: MultiDropper-BG (McAfee)
  • Mal/Generic-A (Sophos)
  • W32/Dropper.ZCU (FPROT)
  • TrojanDropper:Win32/Dunik!rts (MS(OneCare))
  • Trojan.MulDrop.44 (DrWeb)
  • Win32/TrojanDropper.Small.K trojan (Nod32)
  • TrojanDropper.Win32.Small.K (BitDef7)
  • Trojan.DR.Small.ATOX (VirusBuster)
  • Trojan-Dropper.Win32.Small.K (Ikarus)
  • TrojanDropper.Small (AVG)
  • TR/Drop.Small.K (AVIRA)
  • Backdoor.Oblivion (NAV)
  • W32/Smalldrp.AZM (Norman)
  • Dropper.Small.alu (Rising)
  • Trojan-Dropper.Win32.Small.k [AVP] (FSecure)
  • TROJ_SMALL.DRP.K (TrendMicro)
  • Trojan.Win32.Generic!BT (Sunbelt)
  • Trojan.DR.Small.ATOX (VirusBusterBeta)