Name:

TrojanDownloader.Dofoil.l

Added:

October 23, 2011

Type:

Backdoor

Risk:

Low

Payload:

N/A

At risk systems:

Windows 95/98/ME/XP/NT/2003

Description:

When TrojanDownloader.Dofoil.l is executed, it downloads and installs a copy of the Rogueware, "System Restore".  It performs the following activities:

After execution, it drops the following files:

"C:\Documents and Settings\All Users\Application Data\randomname.exe"

Below are some screenshots: