high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Included in our products from | August 2008 (4.32) |
| Protection available since | 5 July 2008 19:35:24 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Dloadr-BNQ is a Trojan for the Windows platform.
When run, Troj/Dloadr-BNQ copies itself as XPUPDATE.EXE to the Windows folder:
%WINDOWS%\xpupdate.exe
Troj/Dloadr-BNQ sets the following Registry entry is set to run itself at startup:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
Windows update loader
%WINDOWS%\xpupdate.exe
Troj/Dloadr-BNQ additionally sets the following Registry entry:
HKCU\Software\Microsoft\Windows\CurrentVersion
ADP
&apzx=1&apz=<filename_of_executed_trojan>
|
