Troj/Rootkit-DH

Category: Viruses and Spyware Protection available since:17 Aug 2008 14:46:56 (GMT)
Type: Trojan Last Updated:17 Aug 2008 14:46:56 (GMT)
Prevalence: No Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/Rootkit-DH is a Trojan for the Windows platform.

When first run Troj/Rootkit-DH copies itself to <System>\cmrs.exe.

Troj/Rootkit-DH overwrites the file <system>/drivers/beep.sys with a modified version, also detected as Troj/Rootkit-DH.

The following registry entry is created to run cmrs.exe on startup:

HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{1157A4A6-3A8E-3D98-0301-050000030002}
StubPath
<System>\cmrs.exe

download Try Sophos products for free
Download now