July 05, 2009

1/7: Dladr-CEJ Trojan Drops, Modifies Files

Troj/Dloadr-CEJ is a Trojan for the Windows platform.

Troj/Dloadr-CEJ includes functionality to access the internet and communicate with a remote server via HTTP. It attempts to download files from the remote server and tries to modify the following files:

System\winlogon.exe
System\wmsn.exe
System\services.exe

More information can be found at this Sophos page.

1
IT Offers

Partners