TrendLabs Malware Blog
Glossary
TrendWatch
TrendLabs Twitter
TROJ_DLOADR.ZZD
Overview

Malware type: Trojan

Aliases: No Alias Found

In the wild: Yes

Destructive: No

Language: English

Platform: Windows 98, ME, NT, 2000, XP, Server 2003

Encrypted: No

Overall risk rating:


Reported infections:

Damage potential:

Medium

Distribution potential:

Low

Description: 

This Trojan has received attention from independent media sources and/or other security firms.

To get a one-glance comprehensive view of the behavior of this malware, refer to the Behavior Diagram shown below.

TROJ_DLOADR.ZZD Behavior Diagram

Malware Overview

This Trojan may be dropped by other malware. It may be downloaded unknowingly by a user when visiting malicious Web site(s).

It accesses a certain website to download an RSS feed. It saves the downloaded file in the current user's Temporary folder using a certain file name. However, the said site is currently inaccessible. The downloaded file may contain links where this Trojan downloads other files.

It then creates a registry entry to enable the automatic execution of one of the downloaded files. It also attempts to access another website to check for updates for the said RSS feed.

It attempts to download a file from a certain website. As a result, routines of the downloaded file are also exhibited on the affected system.

For additional information about this threat, see:
Solution
Technical Details

Description created: Aug. 21, 2009 12:22:35 AM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.