Downloader.Chekin

Downloader.Chekin is a Trojan Horse that appears to be a component of an adware application. This program periodically checks for new updates and launches them. The updates may come from any Web server on any IP address. A check is not made to verify their integrity prior to execution.

This Trojan is written in Microsoft Visual C++.

NOTES:

• Virus definitions dated prior to June 24, 2003 may detect this as either Security Risk or Download.Trojan.
• Sbsrch_v22.dll and Ttps.exe are additional files that have been found to be related to Downloader.Chekin. If the files are detected, delete them.
• There have been reports that the file, Sifxinst.exe, is a file that the Trojan uses, and that this file, when run, creates the file, Owmngr.exe.
• Virus definitions dated June 6, 2006 or earlier may detect this threat as Trojan.Download.Chekin.

Protection

• Initial Rapid Release version June 24, 2003
• Latest Rapid Release version August 20, 2008 revision 017
• Initial Daily Certified version June 24, 2003
• Latest Daily Certified version August 20, 2008 revision 016
• Initial Weekly Certified release date June 25, 2003

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Medium
• Number of Infections: 50 - 999
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Moderate

Damage

• Damage Level: Medium

Distribution

• Distribution Level: Low