Počet zobrazení stránky

sobota 10. března 2012

TrojanDropper:Win32/Dowque.A


Encyclopedia entry
Updated: Apr 17, 2011  |  Published: Apr 15, 2010

Aliases
  • W32/PWStealer.HKR (Command)
  • Trojan-PSW.Win32.QQPass.ahh (Kaspersky)
  • W32/QQPass.ISG (Norman)
  • Win32/Heur (AVG)
  • Trojan.PWS.QQPass.KO (BitDefender)
  • Trojan.PWS.Qqpass.495 (Dr.Web)
  • Trojan-PSW.Win32.QQPass.ahh (Kaspersky)
  • TSPY_QQPASS.BUJ (Trend Micro)

Alert Level (?)
Severe

Antimalware protection details
Microsoft recommends that you download the latest definitions to get protected.
Detection last updated:
Definition: 1.121.1236.0
Released: Mar 09, 2012
Detection initially created:
Definition: 1.45.287.0
Released: Oct 07, 2008


 

Summary

TrojanDropper:Win32/Dowque.A is a generic detection for malicious files that are capable of installing other malware in the computer.


 

Symptoms

Alert notifications or detections of this malware from installed antivirus or security software may be the only other symptom(s).


 

Technical Information (Analysis)

TrojanDropper:Win32/Dowque.A is a generic detection for malicious files that are capable of installing other malware in the computer.
 
It drops other malware in the system folder and deletes its running copy using a batch file.
 
Files usually dropped by TrojanDropper:Win32/Dowque.A are capable of hooking in processes or APIs.
 
Here are some of the malware families it may install:
 
 
Analysis by Francis Allan Tan Seng

Žádné komentáře:

Okomentovat