high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Protection available since | 28 March 2006 05:33:49 (GMT) |
| Detected by | All Sophos products |
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Bckdr-GPJ is a backdoor Trojan for the Windows platform.
When run Troj/Bckdr-GPJ creates the following files:
<System>\Zcjflmoj.dll
<System>\Zcjflmoj.drv
<System>\Zcjflmoj.sys
These files are also detected as Troj/Bckdr-GPJ. The file <System>\Zcjflmoj.sys is a kernel driver rootkit that will attempt to hide registry entries, filenames, folder names, processes and services with the name "Zcjflmoj".
When run Troj/Bckdr-GPJ may create the following registry entries to run itself on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Zcjflmoj
<path to Trojan executable>
The file Zcjflmoj.sys is registered as a new system driver service named "Zcjflmoj" with a display name of "Zcjflmoj" and a startup type of automatic, so that it is started automatically during system startup. Registry entries are created under:
HKLM\SYSTEM\CurrentControlSet\Services\Zcjflmoj
|
