high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Protection available since | 20 October 2005 00:43:24 (GMT) |
| Detected by | All Sophos products |
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Mkmoose-B is a Trojan for the Windows platform.
Troj/Mkmoose-B injects itself into other running processes including the following in order to run without being noticed:
explorer.exe
NTol.exe
The Trojan will contact a remote URL to report infection and to download files.
The Trojan also has backdoor functionality which will allow a remote user to perform the following activities:
Create/delete files and folders
Run commands
Upload/download files
When first run Troj/Mkmoose-B copies itself to:
<System>\msmgs.exe
<System>\mtask.exe
The following registry entry is set to run mstask.exe on startup:
HKLM\SOFTWARE\Microsoft\Windows NT\Current Version\Winlogon
Userinit
<System>\userinit,<System>\mstask.exe
|
