Content

Downloader-PU

Type
Trojan
SubType
Downloader
Discovery Date
09/16/2004
Length
8,704 bytes
Minimum DAT
4394 (09/22/2004)
Updated DAT
4394 (09/22/2004)
Minimum Engine
5.1.00
Description Added
09/17/2004
Description Modified
09/17/2004 9:42 AM (PT)
Risk Assessment
Corporate User
Low
Home User
Low

Tab Navigation

Characteristics

This is a Trojan that connects to a Polish website to download and execute the  W32/Pahac@MM virus.

It may arrive as an email attachment as follows:

Symptoms

  • Copies itself to the C: drive as ARHIWUM.EXE (8,704 bytes)

Method of Infection

When run, the trojan attempts to download (and run) remote executable file.

Removal

All Users:
Use specified engine and DAT files for detection and removal.

Additional Windows ME/XP removal considerations

Variants

Variants

    N/A

All Information

Overview -

This is a trojan detection. Unlike viruses, trojans do not self-replicate. They are spread manually, often under the premise that they are beneficial or wanted. The most common installation methods involve system or security exploitation, and unsuspecting users manually executing unknown programs. Distribution channels include email, malicious or hacked web pages, Internet Relay Chat (IRC), peer-to-peer networks, etc.

Characteristics

Characteristics -

This is a Trojan that connects to a Polish website to download and execute the  W32/Pahac@MM virus.

It may arrive as an email attachment as follows:

Symptoms

Symptoms -

  • Copies itself to the C: drive as ARHIWUM.EXE (8,704 bytes)

Method of Infection

Method of Infection -

When run, the trojan attempts to download (and run) remote executable file.

Removal -

Removal -

All Users:
Use specified engine and DAT files for detection and removal.

Additional Windows ME/XP removal considerations

Variants

Variants -

    N/A