is a trojan from a family of malware that modifies web browser settings, adds browser bookmarks, and delivers pop-up advertisements. It is a member of the Trojan:Win32/C2Lop
Trojan:Win32/C2Lop.N may arrive on a system as a file that is bundled with other software. When run, it launches Internet Explorer and injects its malicious code into the IE process.
Downloads and Executes Arbitrary Files
Win32/C2Lop.N may connect to a remote web site to download and execute arbitrary files. The downloaded files are usually members of the TrojanDownloader:Win32/Swizzor
family or other components of the Trojan:Win32/C2Lop
family. Once the downloaded files are successfully installed, unwanted pop-ups and advertisements may be displayed on the system.
For example, a specific sample of Win32/C2Lop.N attempts to connect to "ads.netbios-local.com" via TCP port 80 and download files.
Analysis by Jireh Sanico
There are no common symptoms associated with this threat. Alert notifications from installed antivirus software may be the only symptom(s).