IELoader

Category: Trojan

Risk: High Risk

* High risk threats typically are remotely exploitable vulnerabilities, which can lead to system compromise. Successful exploitation does not normally require any interaction. May open up communication ports, use polymorphic tactics, stealth installations, and/or anti-spy counter measures. May use a security flaw in the operating system to gain access to your computer.

Description: IELoader is an adware related trojan. IELoader displays popup windows reading 'dwn', 'done', and/or 'ibn chris'. IELoader slows searches in IE on Google with irrelevant results (Lots of links to other search engines). IELoa makes repeated attempts to access the domain 'tool4ame.com'.

Alias: IELoader Download Trojan, Zzb

Signatures:
process: aaa.exe: MD5 Hash:
process: py.exe: MD5 Hash:
process: bbb[1].exe: MD5 Hash:
process: py[1].exe: MD5 Hash:
process: zzb.exe: MD5 Hash:
process: iagold.exe: MD5 Hash:
process: zzb[1].exe: MD5 Hash:
process: ieloader.exe: MD5 Hash: 6640aed2cde3b60321f
process: ieloader.exe: MD5 Hash:
process: gslkot4bmy.exe: MD5 Hash: 1aa7754e78e7d7d4cf3..