Analysis by: Christopher Daniel So
 PLATFORM:

Windows 98, ME, NT, 2000, XP, Server 2003

 OVERALL RISK RATING:
 DAMAGE POTENTIAL:
 DISTRIBUTION POTENTIAL:
 REPORTED INFECTION:
 SYSTEM IMPACT RATING:
 INFORMATION EXPOSURE:

  • Threat Type: Trojan

  • Destructiveness: No

  • Encrypted: No

  • In the wild: Yes

  OVERVIEW

This Trojan executes downloaded files whose malicious routines are exhibited by the affected system.

  TECHNICAL DETAILS

File Size: 22,622 bytes
File Type: DLL
Memory Resident: No
Initial Samples Received Date: 16 Jul 2010

Download Routine

This Trojan accesses the following websites to download files:

  • http://media9s.com/photo/smbyydj.php?jfk={RANDOM}
  • http://media9s.com/d/dl2.php

It executes downloaded files :

    whose malicious routines are exhibited by the affected system.