high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Included in our products from | March 2008 (4.27) |
| Protection available since | 25 January 2008 19:45:14 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Dloadr-BHZ is a Trojan for the Windows platform.
Troj/Dloadr-BHZ includes functionality to download, install and run new software.
When first run Troj/Dloadr-BHZ copies itself to:
<System>\alg.exe
<System>\locator.exe
<System>\msdtc.exe
<System>\scardsvr.exe
<System>\smlogsvc.exe
Troj/Dloadr-BHZ overwrites Registry entries to replace existing system driver services, registering itself instead. For example:
HKLM\SYSTEM\CurrentControlSet\Services\AppMgmt
ImagePath
<path to executed Trojan>
|
