Sophos

Troj/Lineage-B

Aliases
  • Trojan-PSW.Win32.Lineage.o
Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Protection available since 15 December 2004 14:48:12 (GMT)
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

Troj/Lineage-B is a password stealing Trojan for the Windows platform. The Trojan targets passwords associated with the game "Lineage"

Troj/Lineage-B will send the stolen information to a pre-defined email address or remote website.

Troj/Lineage-B will attempt to disable a number of anti-virus and security related processes and windows, including:

EGHOST.EXE
MAILMON.EXE
KAVPFW.EXE
IPARMOR.EXE
RavMon.exe
ZoneAlarm
PasswordGuard.exe

Troj/Lineage-B is capable of setting the following registry entry in order to run the Trojan automatically each time a user logs in:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
loadMect1
<path to Trojan>

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer