Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

VIRUS \ Spyware ALERTS - October 4, 2008

Oct 3, 2008 3:42PM PDT

Discussion is locked

- Collapse -
Troj/SnpveSVC-C
Oct 3, 2008 3:43PM PDT
- Collapse -
Troj/SnpveSVC-B
Oct 3, 2008 3:44PM PDT
- Collapse -
Troj/Rootkit-DP
Oct 3, 2008 3:45PM PDT
- Collapse -
Troj/IFrame-AZ
Oct 3, 2008 3:47PM PDT
- Collapse -
Troj/FakeVir-GC
Oct 3, 2008 3:48PM PDT
- Collapse -
Mal/FakeAV-J
Oct 3, 2008 3:49PM PDT
- Collapse -
W32/Kolabc-D
Oct 4, 2008 12:42AM PDT
- Collapse -
Troj/PhpShell-Q
Oct 4, 2008 12:43AM PDT
- Collapse -
W32.Imalag.A
Oct 4, 2008 12:49AM PDT
- Collapse -
Troj/Rbot-GXC
Oct 4, 2008 8:20AM PDT
- Collapse -
Troj/DelpDldr-C
Oct 4, 2008 8:21AM PDT

Category Viruses and Spyware

Type Trojan

Troj/DelpDldr-C is a Trojan for the Windows platform.

Troj/DelpDldr-C includes functionality to access the internet and communicate with a remote server via HTTP.

When first run Troj/DelpDldr-C copies itself to <System>\rs32net.exe.

The following registry entry is created to run rs32net.exe on startup:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
rs32net
<System>\rs32net.exe

http://www.sophos.com/security/analyses/viruses-and-spyware/trojdelpdldrc.html?_log_from=rss