We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
Trojan:Win32/Duqu.C
Detected by Microsoft Defender Antivirus
Aliases: Worm/Win32.Stuxnet (AhnLab)
Summary
Trojan:Win32/Duqu.C is a detection for malicious code that has been injected into running processes, such as "lsass.exe", by Trojan:Win32/Duqu.B. Trojan:Win32/Duqu.C attempts to communicate with a remote server with an IP address 206.183.111.97 to download other code that may be used by the malware to perform other actions and allow unauthorized access of an affected computer.
To detect and remove this threat and other malicious software that may be installed on your computer, run a full-system scan with an appropriate, up-to-date, security solution. The following Microsoft products detect and remove this threat:
For more information on antivirus software, see http://www.microsoft.com/windows/antivirus-partners/.
Follow us
