Sophos

Troj/Rustok-Q

Aliases
  • Trojan-Clicker.Win32.Costrat.at
Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Characteristics
  • Drops more malware
  • Installs itself in the registry
Included in our products from July 2007 (4.19)
Protection available since 21 May 2007 11:54:49 (GMT)
Last updated 24 May 2007 16:53:19 (GMT)
Detected by All Sophos products

Action

More Information

Troj/Rustok-Q is a Trojan for the Windows platform.

When Troj/Rustok-Q is installed it creates the file <System>\xpdt.sys.

The file xpdt.sys is registered as a new system driver service named "xpdt", with a display name of "xpdt system driver". Registry entries are created under:

HKLM\SYSTEM\CurrentControlSet\Services\xpdt

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer