high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | June 2008 (4.30) |
| Protection available since | 2 May 2008 18:06:06 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/LegMir-ART is a Trojan for the Windows platform.
Troj/LegMir-ART attempts to steal information relating to online games.
When first run Troj/LegMir-ART copies itself to <Windows>\help\B41346EFA848.exe and creates the following files:
<Root>\1.hiv
<Root>\2.hiv
<Current Folder>\2.bat
<Windows>\1.bat
<Windows>\help\B41346EFA848.dll
The file B41346EFA848.dll is detected as Mal/LineDLL-B.
The other files can be safely deleted.
The file B41346EFA848.dll is registered as a COM object and shell extension, creating registry entries under:
HKCR\CLSID\{1DBD6574-D6D0-4782-94C3-69619E719765}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{1DBD6574-D6D0-4782-94C3-69619E719765}
|
