Troj/Haxdoor-AS

Category: Viruses and Spyware Protection available since:20 Jan 2006 00:00:00 (GMT)
Type: Trojan Last Updated:20 Jan 2006 00:00:00 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/Haxdoor-AS is a Trojan for the Windows platform.

The Trojan steals usernames and passwords and sends stolen data to a remote attacker.

Sophos's anti-virus products include Genotype™ detection technology, which can proactively protect against new threats without requiring an update. Sophos customers have been protected against Troj/Haxdoor-AS (detected as Troj/Haxdor-Fam) since version 3.99. Troj/Haxdoor-AS is a Trojan for the Windows platform.

The Trojan steals usernames and passwords and sends stolen data to a remote attacker.

Troj/Haxdoor-AS copies itself to the Windows system folder as satdll.dll.

The Trojan may set registry entries under:

HKLM\SYSTEM\CurrentControlSet\Control\MPRServices\TestService
<several entries>

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
satdll

The Trojan may also create the file vxdgfx.sys in the Windows system folder.

Sophos's anti-virus products include Genotype™ detection technology, which can proactively protect against new threats without requiring an update. Sophos customers have been protected against Troj/Haxdoor-AS (detected as Troj/Haxdor-Fam) since version 3.99.

download Try Sophos products for free
Download now