Trojan.Hoosmi

Trojan.Hoosmi is a Trojan horse that drops and opens a Microsoft Word document when executed. At the same time it drops and launches malicious files. It uses rootkit technology to hide all the files and registry entries it creates. It also downloads and executes a file from a remote computer.

Protection

• Initial Rapid Release version May 24, 2006
• Latest Rapid Release version August 20, 2008 revision 017
• Initial Daily Certified version May 24, 2006
• Latest Daily Certified version January 20, 2009 revision 048
• Initial Weekly Certified release date May 24, 2006

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Easy

Damage

• Damage Level: Low

Distribution

• Distribution Level: Low