Sophos

Troj/BeastDo-O

Aliases
  • Backdoor.Beastdoor.206
  • BackDoor-AMQ
  • BKDR_BEAST.206
Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Protection available since 19 March 2004 12:20:51 (GMT)
Last updated 3 October 2005 09:53:21 (GMT)
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

Please follow the instructions for removing Trojans.

You will also need to edit the following registry entry, if it is present. Please read the warning about editing the registry.

At the taskbar, click Start|Run. Type 'Regedit' and press Return. The registry editor opens.

Before you edit the registry, you should make a backup. On the 'Registry' menu, click 'Export Registry File'. In the 'Export range' panel, click 'All', then save your registry as Backup.

Locate the HKEY_LOCAL_MACHINE entry:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\
COM Service = <path to msflyx.com>

and remove the reference to "COM Service = <path to msflyx.com>".

Close the registry editor.

More Information

Troj/BeastDo-O is a backdoor Trojan that allows unauthorized access to your computer.

The Trojan copies itself as mslqeu.com to the Windows system folder and as msflyx.com to the folder msagent under the Windows folder.

The Trojan also drops a DLL component of itself as dxdgns.dll in the Windows folder. Troj/BeastDo-O is a backdoor Trojan that allows unauthorized access to your computer.

The Trojan copies itself as mslqeu.com to the Windows system folder and as msflyx.com to the folder msagent under the Windows folder.

The Trojan also drops a DLL component of itself as dxdgns.dll in the Windows folder.

Troj/BeastDo-O sets the following registry entry so that it runs on system startup:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\
COM Service = <path to msflyx.com>

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer