Name:

TrojanDownloader.Delf.zxg

Added:

March 23, 2012

Type:

Trojan

Risk:

Low

Payload:

N/A

At risk systems:

Windows 95/98/ME/XP/NT/2003

Malware problems?   We can help.  Free Removal Tools.

Description:

When TrojanDownloader.Delf.zxg is executed, it performs the following activities:

After execution it drops the following files:

%Windir%\system\plugin.exe
%Windir%\system32\config\csrsss.exe
%Windir%\system32\config\recurso.exe

It modifies/creates the following registry entries:

windows manager:= "%Windir%\system\plugin.exe"
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

"plugin.exe" runs every time Windows starts.