Summary

Summary
Action
More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | June 2008 (4.30) |
| Protection available since | 24 April 2008 01:55:53 (GMT) |
| Detected by | All Sophos products |
Action

Summary
Action
More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Keylog-KE copies itself to <System>\wuaucltl.exe.
Troj/Keylog-KE drops file <System>\pshelp.dll - also detected as Troj/Keylog-KE.
Troj/Keylog-KE registers itself as "system Idle Process" that starts up automatically.
Troj/Keylog-KE starts the process iexplore.exe and injects itself into it.
