W32/Dloadr.AMM Trojan

 Virus Information - W32/Dloadr.AMM Trojan:

W32/Dloadr.AMM is a trojan. The trojan will infect Windows systems.

This trojan is either downloaded from the Internet or dropped by other malware applications.

Upon execution, the trojan copies itself as ipf.exe in the Windows System folder and winut.dat in the Windows System\drivers folder.

The trojan modifies registry at the following location to load itself during each startup.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

The trojan will communicate with a remote server via HTTP.