W32/Muldrop.IZ Trojan

 Virus Information - W32/Muldrop.IZ Trojan:

W32/Muldrop.IZ is a trojan. The trojan will infect Windows systems.

The trojan will arrive as a downloaded file from the Internet. This download URL is being spammed via email.

Upon execution, it copies the following files in the Windows System folder:

aliases.ini
control.ini
fullname.txt
ident.txt
mirc.ico
mirc.ini
nicks.txt
popups.txt
remote.ini
script.ini
servers.ini
sup.bat
sup.reg
svchost.exe
users.ini

Upon copying the above files, it executes SVCHOST.EXE file, as a result malicious routines of the said malware are exhibited on the affected system.

The trojan modifies registry at the following location to load itself during each startup.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run