Troj/Hupigo-AR

Category: Viruses and Spyware
Type: Trojan
Prevalence: No Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/Hupigo-AR is a Trojan for the Windows platform.

When first run Troj/Hupigo-AR copies itself to:

<Common Files>\Microsoft Shared\MSInfo\tomskype.exe
<Root>\tomskype.exe
<System>\_tomskype.exe

and creates the following files:

<Root>\AutoRun.inf
<Common Files>\Microsoft Shared\MSInfo\ReDelBat.bat

The file tomskype.exe is registered as a new system driver service named "Windows_service_XP", with a display name of "Windows_system_internet" and a startup type of automatic, so that it is started automatically during system startup. Registry entries are created under:

HKLM\SYSTEM\CurrentControlSet\Services\Windows_service_XP

download Try Sophos products for free
Download now