Troj/Dwnldr-ZLG is a Trojan for the Windows platform.

When first run, Troj/Dwnldr-ZLG copies itself to C:\WINDOWS\troyan.exe then runs it.


The following registry entry is created on startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run avast
C:\WINDOWS\troyan.exe

Troj/Dwnldr-ZLG downloads a file from preconfigured URL.

More information can be found at this Sophos page.