Microsoft security software detects and removes this threat.

Trojans are a type of malware that try to look innocent to convince you to install them on your PC.

They can steal your personal information, download more malware, or give a malicious hacker access to your PC.

Find out ways that malware can get on your PC.

What to do now

Use the following free Microsoft software to detect and remove this threat:

You should also run a full scan. A full scan might find other, hidden malware.

Enable MAPS 

Enable the Microsoft Active Protection Service (MAPS) on your system to protect your enterprise software security infrastructure in the cloud.

  1. Check if MAPS is enabled in your Microsoft security product:

    1. Select Settings and then select MAPS.

    2. Select Advanced membership, then click Save changes. With the MAPS option enabled, your Microsoft anti-malware security product can take full advantage of Microsoft's cloud protection service

  2. Join the Microsoft Active Protection Service Community
Get more help

You can also visit our advanced troubleshooting page or search the Microsoft virus and malware community for more help.

If you’re using Windows XP, see our Windows XP end of support page.

Threat behavior

We've automatically analyzed this threat, determined that it's a trojan because of what it does when it gets on a PC, and blocked and removed it from your PC.

Typically, trojans try to do one or all of the following:

  • Download and install other malware.
  • Use your computer for click fraud.
  • Record your keystrokes and the sites you visit.
  • Send information about your PC, including usernames and browsing history, to a remote malicious hacker.
  • Give a remote malicious hacker access to your PC.

Due to the generic nature of this threat, we are unable to provide specific information on what it does.

Find out more about how we use machine learning to help guard against the latest malware threats:


Alerts from your security software may be the only symptom.


Alert level: Severe
First detected by definition: 1.89.1290.0
Latest detected by definition: 1.209.1114.0 and higher
First detected on: Sep 08, 2010
This entry was first published on: Sep 29, 2010
This entry was updated on: Nov 18, 2015

This threat is also detected as:
  • Trojan-Downloader.Win32.Small.atmu (Kaspersky)
  • W32/Suspicious_Gen2.BUTGC (Norman)
  • Trojan.DL.Small.DLYN (VirusBuster)
  • Generic4.ALGC (AVG)
  • TR/Dldr.Small.atmu (Avira)
  • Trojan.Generic.4551149 (BitDefender)
  • Win32/Donloz.ARA (CA)
  • Trojan.DownLoad2.15025 (Dr.Web)
  • Win32/Adware.PCProtector.C (ESET)
  • Trojan-Downloader.Win32.Small (Ikarus)
  • Generic.dx!the (McAfee)
  • Trj/Downloader.XLR (Panda)
  • Trojan.Win32.Generic.5224884E (Rising AV)
  • Troj/DwnLdr-IIZ (Sophos)
  • Trojan.Win32.Generic!BT (Sunbelt Software)
  • TROJ_SMALL.LJK (Trend Micro)