Summary

Summary
Action
More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Protection available since | 4 November 2005 04:36:46 (GMT) |
| Last updated | 9 November 2005 01:23:07 (GMT) |
| Detected by | All Sophos products |
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action

Summary
Action
More Information
Please follow the instructions for removing Trojans.
More Information
Troj/LowZone-AX is a Trojan for the Windows platform.
When Troj/LowZone-AX is installed the following files are created:
<Temp>\installer.exe
<current folder>\mt-uninstaller.exe
These files are adware components.
The following registry entry is created to run Troj/LowZone-AX on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
REGMSYS
<pathname of the Trojan executable>
The following registry entries are set, affecting internet security:
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3
1206
0
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3
2001
0
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3
2004
0
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3
1001
0
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3
1004
0
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3
1201
0
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3
1406
0
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3
1601
0
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3
1609
0
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3
1800
0
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3
1804
0
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3
1A00
0
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3
1A04
0
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3
1A05
0
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3
CurrentLevel
1
