Troj/WindFind-B is a downloader Trojan which may download and run executables from a remote location.
The Trojan copies itself to the folder C:\0000000 as mswindindex.exe and creates the following registry entries so that mswindindex.exe is run automatically each time Windows is started:
Troj/WindFind-B may also create a number of HTML files in the same folder.
The Trojan runs continuously in the background, waiting until the user performs an internet search using one of the common search engines, such as Yahoo, Lycos, MSN Search, Google, Altavista, or Excite.
Your favorite shows are back!
Don’t miss your dramas, sitcoms and reality shows. Find out when and where they’re airing!