high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Included in our products from | May 2008 (4.29) |
| Protection available since | 3 April 2008 19:38:24 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Lurk-A is a Trojan for the Windows platform.
When first run Troj/Lurk-A copies itself to <System>\wmpdriver.exe and creates the following registry entries to run wmpdriver.exe on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
wmpdriver
<System>\wmpdriver.exe
HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{3AF58793-9D53-3495-2A92-94D1B4A0E848}
StubPath
<System>\wmpdriver.exe
Troj/Lurk-A injects it's code into a hiddent instance of Microsoft Internet Explorer.
|
