When run Troj/DwnLdr-HQE copies itself to
HKLMSOFTWAREMicrosoftWindowsCurrentVersionRun
Window UDP Control Servic
winlogon.exe
More information can be found at this Sophos page.
4/23: Troj/DwnLdr-HQE Copies Itself to \winlogon.exe
When run Troj/DwnLdr-HQE copies itself to \winlogon.exe and sets a registry entry.
Troj/DwnLdr-HQE is a Trojan for the Windows platform.
Loading Comments...