high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Protection available since | 21 February 2005 09:19:04 (GMT) |
| Detected by | All Sophos products |
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Dropper-AA is a dropper Trojan.
Troj/Dropper-AA will drop SYSW.DLL into the Windows folder and run it.
In order to run the dropped file automatically each time Windows starts, Troj/Dropper-AA will set the following registry entries:
HKCR\CLSID\(RND-CLSID)\InProcServer32
(default)
sysw.dll
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ ShellServiceObjectDelayLoad
System
(RND-CLSID)
where (RND-CLSID) is a randomly generated GUID.
A sample of Troj/Dropper-AA is known to drop Troj/LdPinch-AO.
|
