high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | November 2007 (4.23) |
| Protection available since | 7 September 2007 07:39:10 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Lineag-BI is a Trojan for the Windows platform.
When first run Troj/Lineag-BI copies itself to <Windows>\java\4D1B90FDDF6B.exe and creates the following files:
<Current Folder>\1.bat
<Windows>\1.bat
<Windows>\java\4D1B90FDDF6B.dll
The file 4D1B90FDDF6B.dll is registered as a COM object and shell extension, creating registry entries under:
HKCR\CLSID\{36EAFED6-FE52-42E5-8FEC-703424BAA9CF}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{36EAFED6-FE52-42E5-8FEC-703424BAA9CF
|
