Trojan-Dropper.Win32.Small.dr

Detected	Jan 27 2004 02:20 GMT
Released	Jan 27 2004 02:20 GMT
Published	Oct 25 2007 16:33 GMT

Technical Details
Payload
Removal instructions

Technical Details

This Trojan is designed to install other Trojan programs to the victim machine without the knowledge or consent of the user. This Trojan is a Windows PE EXE file. It is 5632 bytes in size. It is packed using UPX. The unpacked file is approximately 13KB in size. It is written in Assembler.

Payload

When launching, the Trojan extracts the following file from its body to the Windows system directory:

%System%\ctrlpan.dll

This file will be detected by Kaspersky Anti-Virus as Trojan.Win32.StartPage.au.

The Trojan then launches the following processes:

rundll32.exe ctrlpan,Restore

Removal instructions

If your computer does not have an up-to-date antivirus, or does not have an antivirus solution at all, follow the instructions below to delete the malicious program:

Delete the original Trojan file (the location will depend on how the program originally penetrated the victim machine).
Delete the file dropped by the Trojan:
%System%\ctrlpan.dll
Update your antivirus databases and perform a full scan of the computer (download a trial version of Kaspersky Anti-Virus).

Print

Share

Malicious programs

Trojans

Trojan-Dropper

Trojan-Dropper programs are designed to secretly install malicious programs built into their code to victim computers.

This type of malicious program usually save a range of files to the victim’s drive (usually to the Windows directory, the Windows system directory, temporary directory etc.), and launches them without any notification (or with fake notification of an archive error, an outdated operating system version, etc.).

Such programs are used by hackers to:

secretly install Trojan programs and/or viruses
protect known malicious programs from being detected by antivirus solutions; not all antivirus programs are capable of scanning all the components inside this type of Trojans.

Other versions

Trojan-Dropper.Win32.Small.aal

Trojan-Dropper.Win32.Small.af

Trojan-Dropper.Win32.Small.amj

Trojan-Dropper.Win32.Small.anx

Trojan-Dropper.Win32.Small.at

Trojan-Dropper.Win32.Small.aw

Trojan-Dropper.Win32.Small.bc

Trojan-Dropper.Win32.Small.bdx

Trojan-Dropper.Win32.Small.cb

Trojan-Dropper.Win32.Small.cm

Trojan-Dropper.Win32.Small.cw