TrendLabs Malware Blog
Glossary
TrendWatch
TrendLabs Twitter
TROJ_HARNIG.Z
Overview

Malware type: Trojan

Aliases: Trojan-Downloader.Win32.Small.ng (Kaspersky), Downloader-KP (McAfee), Downloader (Symantec), TR/Dldr.Harnig.Q.6 (Avira), Troj/Small-Z (Sophos), TrojanDropper:Win32/Small (Microsoft)

In the wild: Yes

Destructive: No

Language: English

Platform: Windows 95, 98, ME, NT, 2000, XP

Encrypted: No

Overall risk rating:


Reported infections:

Damage potential:

Medium

Distribution potential:

Low

Description: 

This Trojan checks if an Internet connection is available on the infected system. Once a connection is detected, it downloads and saves a list of files from the Internet, and proceeds to execute them. The downloaded files may be normal or malicious.

It attempts to hide its process from the Task Manager of Windows 95, 98, and ME by registering itself as a service process. It also terminates certained processes, which are assumed components of antivirus applications.

It runs on Windows 95, 98, ME, NT, 2000, and XP.

For additional information about this threat, see:
Solution
Technical Details

Description created: Oct. 19, 2004 10:01:21 AM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.