Sophos

Troj/SpyWad-AW

Aliases
  • not-virus:Hoax.Win32.Renos.atv
  • Downloader.gen.a
Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Characteristics
  • Installs itself in the registry
Included in our products from April 2008 (4.28)
Protection available since 14 February 2008 20:07:55 (GMT)
Detected by All Sophos products

Action

More Information

Troj/SpyWad-AW is a Trojan for the Windows platform.

The Troj/SpyWad-AW DLL is registered as a COM object, creating registry entries under:

HKCR\CLSID\{343CE214-9998-4B21-A151-FFE970167297}
HKCR\TypeLib\{D2436533-33F9-495C-9CD9-DAF21E67FFEB}

Registry entries are set as follows:

HKCR\SpyShredder.WebInstall.1\CLSID
(default)
{343CE214-9998-4B21-A151-FFE970167297}

HKCR\SpyShredder.WebInstall\CLSID
(default)
{343CE214-9998-4B21-A151-FFE970167297}

HKLM SOFTWARE\Classes\TypeLib\{D2436533-33F9-495C-9CD9-DAF21E67FFEB}\1.0\HELPDIR (default

Registry entries are created under:

HKCR\SpyShredder.WebInstall

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer