Jul 09 2007
Trojan-Dropper.Java.Xideo
Aliases:
Trojan-Dropper.Java.Xideo (Kaspersky Lab) is also known as: TrojanDropper.Java.Xideo (Kaspersky Lab), JV/Xideo (McAfee),  Trojan Horse (Symantec),  Troj/JVXideo-A (Sophos),  Java/Xideo (H+BEDV),  Java/TrojanDropper.Xideo.A (Eset)
Description added    Nov 28 2006
Behavior                   TrojanDropper
Technical details:
This Trojan is designed to install other Trojan programs to the victim machine without the knowledge or consent of the user. It is written in Java. The file is 42,155 bytes in size.
Payload:
Once launched, the Trojan extracts the following files from itself, saves them to the Windows temporary directory, and launches them for execution:
xxxvideo.com (6 000 bytes, will be detected by Kaspersky Anti-Virus as Trojan.Win32.Alfora)
microsoft.com (15,360 bytes, will be detected by Kaspersky Anti-Virus as Trojan.Win32.Small.w) Removal instructions
Delete the original Trojan file (the location will depend on how the program originally penetrated the victim machine).
Delete xxxvideo.com and microsoft.com from the Windows temporary directory (%Temp%).
Update your antivirus databases and perform a full scan of the computer.
