Sophos

Troj/Riler-AA

Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Included in our products from September 2007 (4.21)
Protection available since 26 July 2007 05:40:55 (GMT)
Detected by All Sophos products

Action

More Information

Troj/Riler-AA is a proxy Trojan for the Windows platform.

When run Troj/Riler-AA creates the files:
<System>\rsvp32.dll - detected as Troj/Riler-AA
<System>\sporder.dll - not malicious

Troj/Riler-AA attempts to register rsvp322.dll as a Winsock layered service provider and may create the following registry entry if the registration fails:

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Window\AppInit_Dlls
rsvp322.dll

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer