July 04, 2009

1/7: Inject-DP Trojan Copies Itself, Sets Registry Entry

Troj/Inject-DP is a Trojan for the Windows platform.

When run Troj/Inject-DP copies itself to (Windows)\fxstaller.exe and sets the following registry entry:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Windows UDP Control Center
fxstaller.exe

More information can be found at this Sophos page.

1
IT Offers

Partners