TrendLabs Malware Blog
Glossary
TrendWatch
TrendLabs Twitter
TROJ_ESEPOR.R
Overview

Malware type: Trojan

Aliases: Trojan-Downloader.Win32.Esepor.r (Kaspersky), Adware.Iefeats (Symantec), Troj/Iefeat-A (Sophos),

In the wild: Yes

Destructive: No

Language: English

Platform: Windows 95, 98, ME, NT, 2000, XP

Encrypted: No

Overall risk rating:


Reported infections:

Damage potential:

Low

Distribution potential:

Low

Description: 

This Trojan may arrive on a system by installation by another malware or spyware. It is commonly used as a Browser Helper Object for Internet Explorer sessions.

It creates the folder "MSFZ" in the Windows directory and drops several files in this directory, which includes nonmalicious data file, auxiliary .DLL files and a file detected by Trend Micro as TROJ_WINSHOW.U.

It creates registry entries that enables this malware to run eat every Windows startup. It also creates other registry entries, which it uses for its malicious routines.

It is malware is written in Visual C++ and arrives as a UPX-compressed file. It runs on Windows 95, 98, ME, NT, 2000 and XP.

For additional information about this threat, see:
Solution
Technical Details

Description created: Apr. 25, 2004 5:11:42 PM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.