TrojanDownloader.Win32.WebDown.1
Details
TrojanDownloader.Win32.WebDown.10
The Webdown virus program belongs to the trojan downloader family. The “trojan package” contains two files (components):
Editor component
Trojan server component
The Editor allows a hacker to select a Web page address to download a file from, and the file name to where the file will be downloaded to. Then the Editor creates a small (up to 3K in size) Server Win32 PE EXE file.
When the Server is run on a victim machine, it downloads and runs that file in the system.
The Server doesn’t install itself into the system and doesn’t have any other function except downloading a file and executing it on victim machines.
Webdown editor screen shots:
Related Posts