Signature Detail
Short Name |
SPYWARE:TROJAN:TROLLA |
|---|---|
Severity |
High |
Recommended |
No |
Category |
SPYWARE |
Keywords |
Troll |
Release Date |
2007/10/16 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
SPYWARE: Troll.a
This signature detects the runtime behavior of spyware Troll.a. Troll.a is a Trojan downloader program that can be configured to fetch files from arbitrary URLs and save them to the Windows folder, System folder, or temporary folder on the victim's computer. The downloaded file(s) are then executed. It also sends a notification message to a predefined ICQ account when run.
References