high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Protection available since | 23 July 2009 06:04:25 (GMT) |
| Detected by | All Sophos products |
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Your options
- Please send us a sample to assist in improving our technology
- Use the instructions for removing generically detected files to delete the file from your computer
- If problems persist, contact Sophos support for assistance with removal
More Information
Mal/Paymilon-A is a malicious file for the Windows files.
Mal/Paymilon-A typically steals password information and acts as a keylogger.
When Mal/Paymilon-A is installed, some of the following files may be created:
<System>\UsrClassEx.exe
<System>\UsrClassEx.exe.reg
<System>\kklog
<Temp>\doc.exe
<Temp>\make.exe
The files make.exe, doc.exe and UsrClassEx.exe are also detected as Mal/Paymilon-A. The file UsrClassEx.Exe.reg is a clean registry file. The file kklog is a clean log of stolen data.
The following registry entry is created to run UsrClassEx.exe on startup:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
UsrClassEx
<System>\UsrClassEx.exe
|
