SPYWARE: Troll.a
This signature detects the runtime behavior of spyware Troll.a. Troll.a is a Trojan downloader program that can be configured to fetch files from arbitrary URLs and save them to the Windows folder, System folder, or temporary folder on the victim's computer. The downloaded file(s) are then executed. It also sends a notification message to a predefined ICQ account when run.
Short Name
SPYWARE:TROJAN:TROLLA
Severity
Major
Recommended
False
Recommended Action
None
Category
SPYWARE
Keywords
Troll.a
Release Date
10/16/2007
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3375
False Positive
Unknown