high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | October 2007 (4.22) |
| Protection available since | 14 August 2007 23:34:12 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/FakeVir-AE is a Trojan for the Windows platform.
When Troj/FakeVir-AE is installed it creates the file <System>\vpccw.dll.
The following registry entry is created to run code exported by counterclaim on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
{e758745e-b8aa-47ac-a652-6307ff5f3ebf}
counterclaim
The file vpccw.dll is registered as a COM object, creating registry entries under:
HKCR\CLSID\{e758745e-b8aa-47ac-a652-6307ff5f3ebf}
Registry entries are created under:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Windows Safety Alert
Troj/FakeVir-AE provides an uninstall option which can be accessed via the Add or Remove Programs dialog in the Windows Control Panel. The software is listed as "Windows Safety Alert".
|
