Summary

Summary
Action
More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Protection available since | 2 May 2008 18:06:06 (GMT) |
| Detected by | All Sophos products |
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action

Summary
Action
More Information
Please follow the instructions for removing Trojans.
More Information
Troj/LegMir-ART is a Trojan for the Windows platform.
Troj/LegMir-ART attempts to steal information relating to online games.
When first run Troj/LegMir-ART copies itself to <Windows>\help\B41346EFA848.exe and creates the following files:
<Root>\1.hiv
<Root>\2.hiv
<Current Folder>\2.bat
<Windows>\1.bat
<Windows>\help\B41346EFA848.dll
The file B41346EFA848.dll is detected as Mal/LineDLL-B.
The other files can be safely deleted.
The file B41346EFA848.dll is registered as a COM object and shell extension, creating registry entries under:
HKCR\CLSID\{1DBD6574-D6D0-4782-94C3-69619E719765}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{1DBD6574-D6D0-4782-94C3-69619E719765}
