Home / malware

PDF

TrojanDownloader:Win32/Garveep.D

First posted on 05 December 2014.
Source: Microsoft

Aliases :

There are no other names known for TrojanDownloader:Win32/Garveep.D.

Explanation :

Threat behavior

Installation
This threat can create files on your PC, including:

• %APPDATA%\adobe\10.0\update.exe

Payload


Connects to a remote host

We have seen this threat connect to a remote host, including:

• joans.twilightparadox.com using port 80
• students.crabdance.com using port 80

Malware can connect to a remote host to:

• Check for an Internet connection.
• Download and run files (including updates or other malware).
• Report a new infection to its author.
• Receive configuration or other data.
• Receive instructions from a malicious hacker.
• Search for your PC location.
• Upload information taken from your PC.
• Validate a digital certificate.

This malware description was published using automated analysis of file SHA1 2bd046aceee4623591b5f60aec54d559100fc345. Symptoms

The following can indicate that you have this threat on your PC:

• You see these files:
• %APPDATA%\adobe\10.0\update.exe

Last update 05 December 2014

 

TOP