high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Protection available since | 2 May 2007 19:16:41 (GMT) |
| Detected by | All Sophos products |
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Your options
- Please send us a sample to assist in improving our technology
- Use the instructions for removing generically detected files to delete the file from your computer
- If problems persist, contact Sophos support for assistance with removal
More Information
Mal/78Crack-A is a family of downloader Trojans for the Windows platform.
Mal/78Crack-A contains functionality to download and run new executables without notification that it is doing so.
When first run Mal/78Crack-A copies itself to <Windows>\smss.exe and creates the following registry entry to run itself on startup:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
Kernel Safe Mode
<Windows>\smss.exe
Mal/78Crack-A may change the start page for Microsoft Internet Explorer by setting the following registry value:
HKCU\Software\Microsoft\Internet Explorer\Main\Start Page
Mal/78Crack-A may also launch Microsoft Internet Explorer to display popups.
|
