Threat Encyclopedia

Selected viruses, spyware, and other threats: sorted alphabetically

Win32/TrojanDownloader.Delf.ZEB

Aliases:Trojan-Downloader.Win32.Delf.zeb (Kaspersky), Trojan:Win32/Sisron (Microsoft), Downloader.Delf.DQP (AVG) 
Type of infiltration:Trojan  
Size:381440 B 
Affected platforms:Microsoft Windows 
Signature database version:4904 (20100301) 

Short description

Win32/TrojanDownloader.Delf.ZEB is a trojan which tries to download other malware from the Internet.

Installation

The trojan does not create any copies of itself.

Other information

The trojan contains an URL address. It tries to download a file from the address.

The file is stored in the following location:
  • c:windowssystem32regedi.exe
The HTTP protocol is used.

The following Registry entry is set:
  • [HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersion
    Run]
    "kuras" = "c:Windowssystem32kuras.exe"