Malware

Redosdru

Redosdru is a malware family that primarily acts as a downloader.

Redosdru is a Windows malware family.

Background

Redosdru is a malware family whose main role is that of a downloader. When run, it can write the DLLs it retrieves into the "%ProgramFiles%\AppPatch" directory. To stay resident, it alters the Windows registry, inserting entries that cause it to launch automatically each time the system boots.

Source: Malpedia (Fraunhofer FKIE).