high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | March 2008 (4.27) |
| Protection available since | 26 January 2008 16:33:07 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Bishin-A is a .NET Trojan for the Windows platform.
If run before 31st Jan 2008, Troj/Bishin-A copies itself to <Application Data>\MVScvs\svchost.exe and creates the following registry entry in order to be run automatically:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\
MVSvcs
<Application Data>\MVScvs\svchost.exe
Troj/Bishin-A also displays the first JPG file found in the current folder, if any exist.
|
