Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

Troj/Imiserv-C

Mar 11, 2004 12:20AM PST

Aliases
TrojanDownloader.Win32.OneClickNetSearch.b, TROJ_IMISERV.C

Type
Trojan

Description
Troj/Imiserv-C is a downloader Trojan which downloads executables and adware plugins for Microsoft Internet Explorer.
When first run Troj/Imiserv-C copies itself to the Windows folder as wupdt.exe and creates the following registry entry, so that wupdt.exe is run automatically each time Windows is started:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
Win Sever Updt = <WINDOWS>\wupdt.exe

Registry entries are also created under HKCU\Software\intexp.


More: http://www.sophos.com/virusinfo/analyses/trojimiservc.html

Discussion is locked