Trojan.Poldo

Trojan.Poldo is a Trojan horse that attempts to disguise itself as a antivirus tool. It also attempts to take advantage of the Jdbgmgr file hoax. It will attempt to terminate processes and delete files of associated processes that it finds in the Run and RunServices registry keys.

Protection

• Initial Rapid Release version December 18, 2002
• Latest Rapid Release version September 24, 2008 revision 019
• Initial Daily Certified version December 18, 2002
• Latest Daily Certified version January 20, 2009 revision 048
• Initial Weekly Certified release date December 18, 2002

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Moderate

Damage

• Damage Level: Medium

Distribution

• Distribution Level: Low