netda.exe

identifies as: BKDR_CCT.A. Sophos calles it Dumaris(sp?)

Description of trojan:
Upon execution, it drops copies of itself as:

* %System%\netda.exe
* %System%\netdc.exe
* %Startup%\netdb.exe
* %Windows%\prntsrv.dll

This Trojan steals critical information by monitoring windows accessed by the user. It logs all keystrokes on windows containing certain strings.  It also disables access to antivirus Web sites in order to stop users from upgrading to the latest pattern files.