Qdel374

This page shows details and results of our analysis on the malware Qdel374

Overview

This is a trojan detection. Unlike viruses, trojans do not self-replicate. They are spread manually, often under the premise that they are beneficial or wanted. The most common installation methods involve system or security exploitation, and unsuspecting users manually executing unknown programs. Distribution channels include email, malicious or hacked web pages, Internet Relay Chat (IRC), peer-to-peer networks, etc.


Minimum DAT

4254 (2003-03-26)

Updated DAT

4695 (2006-02-13)

Minimum Engine

5.1.00

File Length

86,021 Bytes

Description Added

2003-03-21

Description Modified

2003-03-21

Malware Proliferation

Characteristics

This threat is detected as Qdel374. On executing the trojan, the following message is displayed:

The trojan then proceeds to delete files in:
  • c:\winnt\*.*
  • c:\windows\*.*
  • c:\winnt\fonts\*.*
  • c:\windows\fonts\*.*

Symptoms

Files in the above folders deleted. The above message displayed.

Method of Infection

Removal

All Users:
Use current engine and DAT files for detection. Delete any file which contains this detection.

Variants