Troj/Sdbot-FM

Categoría: Virus y programas espía Protección disponible desde:04 feb 2004 00:00:00 (GMT)
Tipo: Trojan Última actualización:04 feb 2004 00:00:00 (GMT)
Predominio:

Download Descargue nuestra herramienta gratuita para la eliminación de virus - Encuentre las amenazas no detectadas por su antivirus

Troj/Sdbot-FM is a backdoor Trojan which runs in the background as a service process and allows unauthorised remote access to the computer via IRC channels.

The Trojan copies itself to the Windows system folder as svch0st.exe and creates entries in the registry at the following locations to run itself on system restart:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices

The Trojan remains resident, listening for commands from remote users. If it receives the appropriate command the Trojan attempts to drop and execute a batch file detected as Bat/Botsecure-A in order to change the user's security settings.

descargar Pruebe los productos de Sophos totalmente gratis
Descargue una evaluación gratuita