Summary

Summary
More Information
| Affected operating systems | Windows |
|---|---|
| Included in our products from | April 2008 (4.28) |
| Protection available since | 11 February 2008 02:44:55 (GMT) |
| Detected by | All Sophos products |
More Information

Summary
More Information
Troj/PSW-ES is a Trojan for the Windows platform.
Troj/PSW-ES has capabilities to steal information and send stolen data to a remote website.
Troj/PSW-ES has capabilities to steal information and send stolen data to a remote website.
When installed, the Trojan may create the following filename:
<System>\<dh3oor0>.dll - also detected as Troj/PSW-CN
and the following registry entries:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\
ShellExecuteHooks
{A120A1D0-CBCC-4F9B-A183-78B27E4C1B5C}
Troj/PSW-ES injects code into "explorer.exe".
