TrendLabs Malware Blog
Glossary
TrendWatch
TrendLabs Twitter
TROJ_NARRATOR.A
Overview

Malware type: Trojan

Aliases: Trojan-Downloader.Win32.Qoologic.bf (Kaspersky), Adware.QoolAid (Symantec), TR/Dldr.Qoologic.F (Avira), Mal/Behav-037 (Sophos),

In the wild: Yes

Destructive: No

Language: English

Platform: Windows 95, 98, ME, NT, 2000, XP

Encrypted: No

Overall risk rating:


Reported infections:

Damage potential:

Low

Distribution potential:

Low

Description: 

This memory-resident Trojan drops two copies of itself using random file names with .DLL and .EXE as their extension names.

It also drops other components, and creates registry entries to ensure the automatic execution of its dropped files at every Windows startup.

This Trojan creates the mutex qoolaid_v2.6.8 to ensure that only one instance of itself is present on the affected machine.

It runs on Windows 95, 98, ME, NT, 2000, and XP.

For additional information about this threat, see:
Solution
Technical Details

Description created: Dec. 3, 2004 1:48:14 PM GMT -0800
Description updated: Dec. 7, 2004 2:12:20 AM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.