Overall risk rating:

Reported detections:

System  impact:

Information exposure:

Description:

This spyware may be downloaded from remote sites.

It creates a folder and drops component files. It turns the affected system into a Web server using a dropped component file. This spyware also modifies the system's HOSTS files to prevent users from accessing certain Web sites.

It steals information. It displays a fake login page when an affected user accesses a certain Web site. It logs user keystrokes and sends the gathered information to a remote user using HTTP post.

For additional information about this threat, see:
Solution
Technical Details

Description created: Nov 6, 2008

Revision history: 
Nov 6, 2008 - Renamed from TROJ_DROPPER.LV