Malware type: Trojan

Aliases: Trojan-Downloader.Win32.VB.fi (Kaspersky), Downloader-TL (McAfee), Downloader (Symantec), TR/Dldr.VB.fi (Avira), Troj/Abox-A (Sophos),

In the wild: Yes

Language: English

Platform: Windows 95, 98, ME, NT, 2000, XP

Description: 

This Trojan attempts to drop the following files in the Windows temporary folder:

• CAINST.FTP
• CAUPD.FTP

The said files are used as FTP scripts to download the following files from fregamnet.com:

• LOGON.TXT
• UPDATE.EXE

The downloaded binary files are detected by Trend Micro as TROJ_VB.IH.

For additional information about this threat, see:
Solution
Technical Details

Description created: Mar. 4, 2005 8:23:43 AM GMT -0800
Description updated: Mar. 18, 2005 12:32:44 AM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.