Other versions: .bo, .ca, .dc, .eu, .ev, .ew, .fa, .fp
| Detection added |
Nov 23 2006 16:17 GMT |
| Update released |
Nov 24 2006 18:32 GMT |
| Description added |
Feb 19 2007 |
| Behavior |
TrojanDownloader |
This Trojan program will download other files via the Internet without the knowledge
or consent of the user. It is a VB script scenario. It is approximately 2,5KB
in size.
Once launched, the Trojan downloads a file from the following URLs:
http://**.80.5.21/time.txt
and saves it to the following file in the current hard disk partition:
\DOCUME~1\FORDJ\LOCALS~1\Temp\b\abc123.dat
If your computer does not have an up-to-date antivirus, or does not have an
antivirus solution at all, follow the instructions below to delete the malicious
program:
- Delete the original Trojan file (the location will depend on
how the program originally penetrated the victim machine).
- Delete the following file from the partition where the Trojan
is located:
\DOCUME~1\FORDJ\LOCALS~1\Temp\b\abc123.dat
- Update your antivirus databases and perform a full scan of the
computer (download a trial version of Kaspersky Anti-Virus).
