Short description
Win32/TrojanDownloader.Delf.ZEB is a trojan which tries to download other malware from the Internet.
Installation
The trojan does not create any copies of itself.
Other information
The trojan contains an URL address. It tries to download a file from the address.
The file is stored in the following location:
- c:\windows\system32\regedi.exe
The HTTP protocol is used.
The following Registry entry is set:
- [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\
Run]
"kuras" = "c:\Windows\system32\kuras.exe"
