(Trojan.Downloader.Small.AACD, Trojan-Downloader.Win32.Small.eqn, Trojan:Win32/Anomaly.gen!A)
Presence of one or more of the following registry keys:
A program named "retadpu.exe"in the task list which starts at Windows Startup under the name "runner1".
Please let BitDefender disinfect your files.
Daniel RADU, Virus Researcher
Trojan.Retapu.D is a downloader, it's task is to download additional pieces of malware from the internet and run them on the infected computer.
It downloads this file:
and executes it after downloading. After this step is completed Trojan.Retapu.D exits.
The newly downloaded file is copied into %windir% folder and then puts it into startup key so it runs at Windows startup everytime. It is also a downloader but similar to an updater: transfers additional components of the Retapu family on the infected computer on a regular basis (as to keep them with latest 'versions').