Summary

Summary
Action
More Information
| Affected operating systems | Windows |
|---|---|
| Protection available since | 19 March 2004 12:20:51 (GMT) |
| Last updated | 3 October 2005 09:53:21 (GMT) |
| Detected by | All Sophos products |
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action

Summary
Action
More Information
Please follow the instructions for removing Trojans.
You will also need to edit the following registry entry, if it is present. Please read the warning about editing the registry.
At the taskbar, click Start|Run. Type 'Regedit' and press Return. The registry editor opens.
Before you edit the registry, you should make a backup. On the 'Registry' menu, click 'Export Registry File'. In the 'Export range' panel, click 'All', then save your registry as Backup.
Locate the HKEY_LOCAL_MACHINE entry:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\
COM Service = <path to msflyx.com>
and remove the reference to "COM Service = <path to msflyx.com>".
Close the registry editor.
More Information
Troj/BeastDo-O is a backdoor Trojan that allows unauthorized access to your computer.
The Trojan copies itself as mslqeu.com to the Windows system folder and as msflyx.com to the folder msagent under the Windows folder.
The Trojan also drops a DLL component of itself as dxdgns.dll in the Windows folder. Troj/BeastDo-O is a backdoor Trojan that allows unauthorized access to your computer.
The Trojan copies itself as mslqeu.com to the Windows system folder and as msflyx.com to the folder msagent under the Windows folder.
The Trojan also drops a DLL component of itself as dxdgns.dll in the Windows folder.
Troj/BeastDo-O sets the following registry entry so that it runs on system startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\
COM Service = <path to msflyx.com>
