Summary

Summary
Action
More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | May 2008 (4.29) |
| Protection available since | 28 March 2008 02:14:35 (GMT) |
| Detected by | All Sophos products |
Action

Summary
Action
More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Bckdr-QMR is a Trojan for the Windows platform.
When run Troj/Bckdr-QMR creates the files:
<System>\6to4.dll- also detected as Troj/Bckdr-QMR
<System>\6to4.sys- also detected as Troj/Bckdr-QMR
Troj/Bckdr-QMR registers the DLL as a Windows service with the display name "6to4" so that the Trojan is run on startup. Registry entries are set under:
HKLM\SYSTEM\CurrentControlSet\Services\6to4
Troj/Bckdr-QMR may also attempt to set the following registry entry:
HKLM\SYSTEM\CurrentControlSet\Services\Beep\Enum
INITSTARTFAILED
1
