high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | June 2008 (4.30) |
| Protection available since | 1 May 2008 10:02:19 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Goldun-GF is a Trojan for the Windows platform.
When Troj/Goldun-GF is installed the following files are created:
<System>\divxps.dll - Mal/HckPk-E
<System>\klite.sys - Troj/Goldun-GF
The following registry entries are created to run code exported by divxps.dll on startup:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\divxps
DllName
divxps.dll0
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\divxps
Startup
divxps
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\divxps
Impersonate
1
|
