Sophos

Troj/AdRmove-A

Aliases
  • Trojan.Win32.KillFiles.fz
  • Del-457
Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Protection available since 27 September 2004 08:38:54 (GMT)
Detected by All Sophos products
  • Endpoint Security and Control 9.0
  • Small business solutions 4.0

Action

More Information

Troj/AdRmove-A is a file deleting Trojan which will scan the user's computer for adware based on very lose heuristic and delete any files/registry entries with names similar to known Adware. Since a lot of adware tries to use filenames similar to legitimate files, this may result in some important files being deleted without the user's knowledge.

The trojan is designed to run silently in background without prompting the user for any result of detection and confirmation before deleting the files.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer