Published Oct 14, 2011|Updated Sep 15, 2017

Trojan:Win32/Duqu.C

Alert level: Severe Detected with Windows Defender Antivirus

Also detected as: Worm/Win32.Stuxnet (AhnLab)

Trojan:Win32/Duqu.C is a detection for malicious code that has been injected into running processes, such as "lsass.exe", by Trojan:Win32/Duqu.B. Trojan:Win32/Duqu.C attempts to communicate with a remote server with an IP address 206.183.111.97 to download other code that may be used by the malware to perform other actions and allow unauthorized access of an affected computer.

 

Latest news
VIEW ALL