high
Summary
Summary
Action- More Information
| Protection available since | 23 June 2004 08:51:50 (GMT) |
|---|---|
| Detected by | All Sophos products |
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Garant-A is a backdoor Trojan that provides unauthorised access to the
victim's computer. The Trojan opens ports that provide the attacker with both
command line and FTP access.
Troj/Garant-A drops a randomly named DLL and EXE file to the Windows system
folder and sets the following registry entry so that the DLL file is run when Windows starts up:
HKCR\CLSID\79FEACFF-FFCE-815E-A900-316290B5B738\
InProcServer32\(Default) = C:\WINDOWS\System32\<random name>.dll
The DLL file will execute the EXE file that is created in the Windows system folder.
|
