This Trojan downloads other malicious programs from the Internet and launchesthem on the victim machine. The program itself is a Windows PE EXE file. Itis 43008 bytes in size. It is not packed in any way. It is written in BorlandDelphi. Once launched, the Trojan downloads a file called btiein.cab, and saves itto the Windows temporary directory btiein.cab as down.cab: %Temp%\down.cab The file is downloaded from the following link: - http://download.websearch.com/***/T_50094/btiein.cab — (CAB-file, 117663 bytes).
The archive contains two files: These files will be extracted to the Windows temporary directory: %Temp%\btiein.dll%Temp%\WinTools.exe The files are then launched for execution. If your computer does not have an up-to-date antivirus, or does not have anantivirus solution at all, follow the instructions below to delete the maliciousprogram: - Use Task Manager to terminate the original Trojan process.
- Delete the original Trojan file (the location will depend onhow the program originally penetrated the victim machine).
- Delete the following files:
%Temp%\btiein.dll%Temp%\WinTools.exe%Temp%\down.cab - Update your antivirus databases and perform a full scan of thecomputer (download a trial version of Kaspersky Anti-Virus).
Printed From:http://www.viruslist.com/en/viruses/encyclopedia?virusid=49105
Similar Virus/Threat >>
Trojan-Downloader.Win32.Nurech.at
This Trojan downloads files via the Internet without the knowledge or consentof the user. It is a Windows PE EXE file. The file is approximately 28KB insize. It is packed using UPX. The unpacked...
Trojan-Downloader.Win32.Small.jk
This Trojan downloads other programs via the Internet without the knowledgeor consent of the user and launches them on the victim machine. The programitself is a Windows PE EXE file. It is 36,352...
Trojan-Downloader.Win32.IstBar.ah
This Trojan downloads files from the Internet to the victim machine and launchesthem for execution. The Trojan itself is a Windows PE EXE file. It is 16 896bytes in size, and packed using UPX. The...
Trojan-Downloader.Win32.Small.ddp
This Trojan downloads other malicious programs. It is a Windows PE EXE file.It is written in Microsoft Visual C++. It is not packed in any way. The sizeof infected files may vary from 20KB to...
Trojan-Downloader.Win32.IstBar.bo
This Trojan downloads other programs via the Internet and launches them on thevictim machine without the user’s knowledge or consent. The program itselfis a Windows PE EXE file. It is 8,704...
Trojan-Downloader.Win32.Small.eqn
Trojan-Downloader.Win32.Bagle.cu
|
