Sophos

Troj/Lohav-T

Aliases
  • Trojan-Proxy.Win32.Mitglieder.dn
Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Characteristics
  • Installs itself in the registry
Protection available since 9 September 2005 08:57:34 (GMT)
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

Troj/Lohav-T is a backdoor Trojan for the Windows platform.

When the run the Trojan attempts to copy itself to the Windows system folder as \realupd32.exe and create the following registry entry so as to auto-start:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
RealPlayerUpdater
<System>\realupd32.exe

The Trojan will attempt to download and execute files from a remote website.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer