Sophos

Troj/Goldun-FS

Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Characteristics
  • Installs itself in the registry
Included in our products from July 2007 (4.19)
Protection available since 8 May 2007 08:50:03 (GMT)
Last updated 14 May 2007 22:01:20 (GMT)
Detected by All Sophos products

Action

More Information

Troj/Goldun-FS is a Trojan for the Windows platform.

When Troj/Goldun-FS is installed the following files are created:

<Current Folder>\update.bat (Can be safely removed)
<System>\htmlythyt.dll (Detected as Troj/Goldun-FS)
<System>\wincrc32ie.dll (Can be safely removed)

The following registry entry is set:

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
AppInit_DLLs
<System>\htmlythyt.dll

Registry entries are created under:

HKLM\SOFTWARE\WIN32CRC_serv\fingerprint\898955898955884269588955884269

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer