www.esecurityplanet.com/alerts/article.php/3801591
Back to Article

2/9: Daonol-Fam Trojan Family Copy Themselves to Root Folder
By
February 9, 2009

Troj/Daonol-Fam is a family of Trojans for the Windows platform.

Members of Troj/Daonol-Fam typically copy themselves to the Root folder and create some of the following files:

Root\(random filename).bat (clean batch file)
System\sysaudio.sys

The file sysaudio.sys is also a member of Troj/Daonol-Fam.

More information can be found at this Sophos page.