KillRDLL.A

Common name:
KillRDLL.A
Technical name:
Trj/KillRDLL.A
Threat level:
Medium
Type:
Trojan
Effects:
It creates a copy of itself whenever the user accesses a directory. This file has the icon of a Windows folder and the extension hidden so that the user thinks it is a folder. It does not spread automatically using its own means.
Affected platforms:
Windows 2003/XP/2000/NT/ME/98/95
First detected on:
June 23, 2009
Detection updated on:
June 25, 2009
Statistics
No
Brief Description

KillRDLL.A is a Trojan designed to create a copy of itself whenever the user accesses a directory. This file has the icon of a Windows folder and the extension hidden so that the user thinks it is a folder.
If the user accesses any subdirectory, it also creates the copy of itself.
KillRDLL.A does not spread automatically using its own means. It needs an attacking user's intervention in order to reach the affected computer.
Visible Symptoms

KillRDLL.A is easy to recognize, as it displays the following symptoms:
Whenever the user accesses any directory, it creates a new folder, which is actually a copy of itself. The folder Favorites of the image, is in fact a copy of the Trojan disguised as a Windows folder:


















These are some of the names it uses, among others:

Angelina Jolie

ClipsDocuments

Favorites

Flash GamesGames

My Documents

My FolderPicture

VideoWallPapers




Addiionally, when it is run, it opens the website of a search engine which falsifies the results: