Sophos

Troj/Lineage-NS

Aliases
  • Trojan-PSW.Win32.Lineage.ns
Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Characteristics
  • Installs itself in the registry
Protection available since 9 November 2005 14:11:59 (GMT)
Detected by All Sophos products
Download Free virus scan
Download the Threat Detection Test
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

Troj/Lineage-NS is a password stealing Trojan for the Windows platform that attempts to steal passwords associated with the game called "Lineage".

When Troj/Lineage-NS is installed it creates the file <Common Files>\Microsoft Shared\MSInfo\MsDos.DLL. This file is also detected as Troj/Lineage-NS.

The file MsDos.DLL is registered as a COM object and ShellExecute hook, creating registry entries under:

HKCR\CLSID\(3FDEB171-8F86-4669-B664-69B8DB553683)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer \ShellExecuteHooks\(3FDEB171-8F86-4669-B664-69B8DB553683)

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer