Summary

Summary
Action
More Information
| Affected operating systems | Windows |
|---|---|
| Included in our products from | September 2007 (4.21) |
| Protection available since | 26 July 2007 05:40:55 (GMT) |
| Detected by | All Sophos products |
Action

Summary
Action
More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Riler-AA is a proxy Trojan for the Windows platform.
When run Troj/Riler-AA creates the files:
<System>\rsvp32.dll - detected as Troj/Riler-AA
<System>\sporder.dll - not malicious
Troj/Riler-AA attempts to register rsvp322.dll as a Winsock layered service provider and may create the following registry entry if the registration fails:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Window\AppInit_Dlls
rsvp322.dll
