BKDR_SMALL.LEC
BKDR_SMALL.LEC is a backdoor Trojan that disguises itself as a Trend Micro download. Once an unsuspecting user downloads and installs BKDR_SMALL.LEC, it will inject into processes running in memory. BKDR_SMALL.LEC will also create a registry entry that will ensure it is executed each time the system is started up. Additionally, BKDR_SMALL.LEC will execute commands from a remote server and deteriorate the performance of the compromised machine.
Registry Details
BKDR_SMALL.LEC may create the following registry entry or registry entries:
ServiceDll = "%System%\Iasex.dll"
Services\Ias\Parameters
ServiceDll = "%System%\Nwsapagentex.dll"
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Services\Nwsapagent\Parameters
