Name:

TrojanDropper.Injector.jyl

Added:

December 12, 2011

Type:

Trojan

Risk:

Low

Payload:

N/A

At risk systems:

Windows 95/98/ME/XP/NT/2003

Malware problems?   We can help.  Free Removal Tools.

Description:

When TrojanDropper.Injector.jyl is executed, it performs the following activities:

After execution, it drops the folowing files:

%Appdata%\Microsoft\Ardbwlp\ardbwl.dll
%Appdata%\Microsoft\Ardbwlp\ardbwlp.dll
%Appdata%\Microsoft\Ardbwlp\ardbwlp.exe
%Appdata%\Microsoft\Ardbwlp\ardbwlp32.dll

It creates/modifies the folowing registry entries:

siekcham = "%AppData%\Microsoft\Ardbwlp\ardbwlp.exe"
HKU\Software\Microsoft\Windows\CurrentVersion\Run

"ardbwlp.exe" Runs every time Windows start.