high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Protection available since | 15 September 2005 22:38:19 (GMT) |
| Detected by | All Sophos products |
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Litebot-E is an IRC backdoor Trojan for the Windows platform.
Troj/Litebot-E runs continuously in the background, providing a backdoor server which allows a remote intruder to gain access and control over the computer via IRC channels.
Troj/Litebot-E contains functionality to download and run further malicious code.
When first run the Trojan copies itself to the Windows system folder and creates the following registry entry in order to run itself on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Connectivity Tool
<path to Trojan>
Troj/Litebot-E creates the following registry entry in order to allow it to bypass the Windows firewall:
HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile\AuthorizedApplications\List
<path to Trojan>
<path to Trojan>:*:Enabled:Connectivity Tool
|
