high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | February 2007 (4.14) |
| Protection available since | 4 January 2007 21:00:28 (GMT) |
| Last updated | 11 January 2007 02:05:41 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Zlob-XU is a Trojan for the Windows platform.
Troj/Zlob-XU pretends to be an installer called "DirectVideo Setup".
When Troj/Zlob-XU is installed it creates the file <System>\kdcmt.exe. This file is also detected as Troj/Zlob-XU and contains stealthing functionality.
Troj/Zlob-XU also drops a file detected as Troj/DNSChan-JS.
The following registry entry is changed to run kdcmt.exe on startup:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
System
kdcmt.exe
|
