TROJ_ROVNIX.NW
Trojan.Win32.Cidox.afaa (Kaspersky), TrojanDropper:Win32/Rovnix.H (Microsoft)
Windows 2000, Windows Server 2003, Windows XP (32-bit, 64-bit), Windows Vista (32-bit, 64-bit), Windows 7 (32-bit, 64-bit)
Threat Type: Trojan
Destructiveness: No
Encrypted:
In the wild: Yes
OVERVIEW
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
It is a component of other malware.
It deletes itself after execution.
TECHNICAL DETAILS
177,152 bytes
EXE
No
18 Apr 2013
Arrival Details
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
Installation
This Trojan is a component of other malware.
Other System Modifications
This Trojan adds the following registry keys:
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{ADEBD814-D814-1414-141414141414
Other Details
This Trojan deletes itself after execution.