W32/Diehard.EV.Downloader is a trojan. The trojan will infect Windows systems.

Upon execution, the trojan drops the following files:

ip6fw.sys in Windows System\DRIVERS folder,
runtime.sys in Windows System\DRIVERS folder,
7_exception.nls in Windows System folder.

The trojan modifies registry at the following locations;

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\runtime
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\runtime

The trojan will also download other files from remote servers and execute them in the infected system.

This information was updated on March 03, 2008.

 Other names of W32/Diehard.EV.Downloader Trojan:

This trojan is also known as Trojan-Downloader.Win32.Diehard.ev, Spy-Agent.bv.dldr, Win32/Cutwail.DI, Trojan.Dldr.DieHard.EV.1.